CVE Vulnerability

CVE-2020-25902

** DISPUTED ** Blackboard Collaborate Ultra 20.02 is affected by a cross-site scripting (XSS) vulnerability. The XSS payload will execute on the class room, which leads to stealing cookies from users who join the class. NOTE: Third-parties dispute the validity of this entry as a possible false positive during research.

4.3 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8.6 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

Scope

6.1 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://www.blackboard.com/teaching-learning/collaboration-web-conferencing/blackboard-collaborate Product Vendor Advisory
https://github.com/Lawyer-1/Turki/blob/main/CVE-2020-25902.md Broken Link
Configurations

Configuration 1

cpe:2.3:a:blackboard:collaborate_ultra:20.02:*:*:*:*:*:*:*
Information

Published : 2021-03-02 01:15

Updated : 2021-04-01 02:36

NVD link : CVE-2020-25902

Mitre link : CVE-2020-25902

Products Affected
No products.
CWE
CWE-79