Login Request a demo
VA
Vendor
Vanderbilt
2 products with CVEs on record
42
CVEs
0
On KEV
0
New 30D
Products
RE
REDCap
Vanderbilt
9.8
41 CVEs0 on KEV0 new
AC
Adaptive Communication Environment
Vanderbilt
9.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2024-55374
RE
Redcap
Vanderbilt
5.3
0%
Jan 2REDCap 14.3.13 allows an attacker to enumerate usernames due to an observable discrepancy between login attempts
CVE-2024-37396
RE
Redcap
Vanderbilt
5.4
0%
Jun 10A stored cross-site scripting (XSS) vulnerability in the Calendar function of REDCap 13.1.9 allows authenticated users to execute arbitrary web script or HTML by injecting a…
CVE-2024-37395
RE
Redcap
Vanderbilt
5.4
0%
Jun 10A stored cross-site scripting (XSS) vulnerability in the Public Survey function of REDCap 13.1.9 allows authenticated users to execute arbitrary web script or HTML by injecting a…
CVE-2024-37394
RE
Redcap
Vanderbilt
5.4
1%
Jun 10A stored cross-site scripting (XSS) vulnerability in the Project Dashboards of REDCap 13.1.9 allows authenticated users to execute arbitrary web script or HTML by injecting a…
CVE-2025-23113
RE
Redcap
Vanderbilt
8.8
0%
Jan 10An issue was discovered in REDCap 14.9.6
CVE-2025-23112
RE
Redcap
Vanderbilt
6.1
0%
Jan 10An issue was discovered in REDCap 14.9.6
CVE-2025-23111
RE
Redcap
Vanderbilt
6.1
0%
Jan 10An issue was discovered in REDCap 14.9.6
CVE-2025-23110
RE
Redcap
Vanderbilt
6.1
0%
Jan 10An issue was discovered in REDCap 14.9.6
CVE-2024-56377
RE
REDCap
Vanderbilt
5.4
0%
Jan 9A stored cross-site scripting (XSS) vulnerability in survey titles of REDCap 14.9.6 allows authenticated users to inject malicious scripts into the Survey Title field or Survey…
CVE-2024-56376
RE
REDCap
Vanderbilt
5.4
0%
Jan 9A stored cross-site scripting (XSS) vulnerability in the built-in messenger of REDCap 14.9.6 allows authenticated users to inject malicious scripts into the message field
CVE-2024-56310
RE
Redcap
Vanderbilt
8.8
0%
Dec 22REDCap through 14.9.6 has a security flaw in the Project Dashboards name, exposing users to a Cross-Site Request Forgery (CSRF) attack
CVE-2024-56314
RE
Redcap
Vanderbilt
5.4
0%
Dec 22A stored cross-site scripting (XSS) vulnerability in the Project name of REDCap through 14.9.6 allows authenticated users to inject malicious scripts into the name field of a…
CVE-2024-56313
RE
Redcap
Vanderbilt
5.4
0%
Dec 22A stored cross-site scripting (XSS) vulnerability in the Calendar feature of REDCap through 14.9.6 allows authenticated users to inject malicious scripts into the Notes field of a…
CVE-2024-56312
RE
Redcap
Vanderbilt
5.4
0%
Dec 22A stored cross-site scripting (XSS) vulnerability in the Project Dashboard name of REDCap through 14.9.6 allows authenticated users to inject malicious scripts into the name field…
CVE-2024-56311
RE
Redcap
Vanderbilt
8.8
0%
Dec 22REDCap through 14.9.6 has a security flaw in the Notes section of calendar events, exposing users to a Cross-Site Request Forgery (CSRF) attack
CVE-2024-45527
RE
Redcap
Vanderbilt
6.1
0%
Sep 2REDCap 14.7.0 allows HTML injection via the project title of a New Project action
CVE-2023-38825
RE
Redcap
Vanderbilt
6.5
1%
Mar 21SQL injection vulnerability in Vanderbilt REDCap before v.13.8.0 allows a remote attacker to obtain sensitive information via the password reset mechanism in…
CVE-2023-37798
RE
Redcap
Vanderbilt
5.4
0%
Sep 7A stored cross-site scripting (XSS) vulnerability in the new REDCap project creation function of Vanderbilt REDCap 13.1.35 allows attackers to execute arbitrary web scripts or…
CVE-2023-37361
RE
Redcap
Vanderbilt
2.7
1%
Jul 25REDCap 12.0.26 LTS and 12.3.2 Standard allows SQL Injection via scheduling, repeatforms, purpose, app_title, or randomization
CVE-2022-42715
RE
Redcap
Vanderbilt
6.1
1%
Oct 12A reflected XSS vulnerability exists in REDCap before 12.04.18 in the Alerts & Notifications upload feature
CVE-2022-24127
RE
Redcap
Vanderbilt
5.4
1%
Jun 15A Stored Cross-Site Scripting (XSS) vulnerability was discovered in ProjectGeneral/edit_project_settings.php in REDCap 12.0.11
CVE-2022-24004
RE
Redcap
Vanderbilt
5.4
1%
Jun 15A Stored Cross-Site Scripting (XSS) vulnerability was discovered in Messenger/messenger_ajax.php in REDCap 12.0.11
CVE-2021-42136
RE
Redcap
Vanderbilt
9.0
5%
Apr 13A stored Cross-Site Scripting (XSS) vulnerability in the Missing Data Codes functionality of REDCap before 11.4.0 allows remote attackers to execute JavaScript code in the…
CVE-2020-26713
RE
Redcap
Vanderbilt
6.1
1%
Jan 12REDCap 10.3.4 contains a XSS vulnerability in the ToDoList function with parameter sort
CVE-2020-26712
RE
Redcap
Vanderbilt
9.8
2%
Jan 12REDCap 10.3.4 contains a SQL injection vulnerability in the ToDoList function via sort parameter
CVE-2020-27358
RE
Redcap
Vanderbilt
4.3
2%
Nov 2An issue was discovered in REDCap 8.11.6 through 9.x before 10
CVE-2014-6311
AC
Adaptive Communication Environment
Vanderbilt
9.8
2%
Nov 22generate_doygen.pl in ace before 6.2.7+dfsg-2 creates predictable file names in the /tmp directory which allows attackers to gain elevated privileges
CVE-2019-17121
RE
Redcap
Vanderbilt
5.4
1%
Oct 4REDCap before 9.3.4 has XSS on the Customize & Manage Locking/E-signatures page via Lock Record Custom Text values
CVE-2019-15127
RE
Redcap
Vanderbilt
5.4
1%
Aug 21REDCap before 9.3.0 allows XSS attacks against non-administrator accounts on the Data Import Tool page via a CSV data import file
CVE-2019-14937
RE
Redcap
Vanderbilt
7.5
1%
Aug 17REDCap before 9.3.0 allows time-based SQL injection in the edit calendar event via the cal_id parameter, such as cal_id=55 and sleep(3) to Calendar/calendar_popup_ajax.php
CVE-2019-13029
RE
Redcap
Vanderbilt
4.8
2%
Jul 11Multiple stored Cross-site scripting (XSS) issues in the admin panel and survey system in REDCap 8 before 8.10.20 and 9 before 9.1.2 allow an attacker to inject arbitrary…
CVE-2017-7351
RE
Redcap
Vanderbilt
8.8
1%
Feb 8A SQL injection issue exists in a file upload handler in REDCap 7.x before 7.0.11 via a trailing substring to SendITController:upload
CVE-2017-10962
RE
Redcap
Vanderbilt
6.1
1%
Jul 18REDCap before 7.5.1 has XSS via the query string
CVE-2017-10961
RE
Redcap
Vanderbilt
8.8
1%
Jul 18REDCap before 7.5.1 has CSRF in the deletion feature of the File Repository and File Upload components
CVE-2013-4612
RE
Redcap
Vanderbilt
–
1%
Jun 17Multiple cross-site scripting (XSS) vulnerabilities in REDCap before 5.1.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving…
CVE-2013-4611
RE
Redcap
Vanderbilt
–
3%
Jun 17Multiple unspecified vulnerabilities in REDCap before 5.1.1 allow remote attackers to have an unknown impact via vectors involving (1) the Online Designer page or (2) the Manage…
CVE-2013-4610
RE
Redcap
Vanderbilt
–
2%
Jun 17Unspecified vulnerability in the Data Search utility in data-entry forms in REDCap before 5.0.3 and 5.1.x before 5.1.2 has unknown impact and remote attack vectors
CVE-2013-4609
RE
Redcap
Vanderbilt
–
2%
Jun 17REDCap before 5.0.4 and 5.1.x before 5.1.3 does not reject certain undocumented syntax within branching logic and calculations, which allows remote authenticated users to bypass…
CVE-2013-4608
RE
Redcap
Vanderbilt
–
1%
Jun 17Cross-site scripting (XSS) vulnerability in REDCap before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via vectors involving the Graphical Data View &…
CVE-2012-6566
RE
Redcap
Vanderbilt
–
1%
Jun 17Cross-site scripting (XSS) vulnerability in REDCap before 4.14.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors
CVE-2012-6565
RE
Redcap
Vanderbilt
–
1%
Jun 17Cross-site scripting (XSS) vulnerability in REDCap before 4.14.3 allows remote authenticated users to inject arbitrary web script or HTML via uppercase characters in JavaScript…
CVE-2012-6564
RE
Redcap
Vanderbilt
–
1%
Jun 17Cross-site scripting (XSS) vulnerability in REDCap before 4.14.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors