CVE-2020-36154
Published Jan 4, 2021The Application Wrapper in Pearson VUE VTS Installer 2.3.1911 has Full Control permissions for Everyone in the "%SYSTEMDRIVE%\Pearson VUE" directory, which allows local users to o…
Vendor archive
pearson CVEs
Beta · best-effort5 CVEs tagged to vendor pearson — 0 Critical, 2 High, 3 Medium, 0 Low, 0 Unrated.
CVE-2014-1454
Published Jan 8, 2020Pearson eSIS (Enterprise Student Information System) message board has stored XSS due to improper validation of user input
CVE-2015-0972
Published Jun 23, 2015Pearson ProctorCache before 2015.1.17 uses the same hardcoded password across different customers' installations, which allows remote attackers to modify test metadata or cause a…
CVE-2014-1455
Published Apr 10, 2014SQL injection vulnerability in the password reset functionality in Pearson eSIS Enterprise Student Information System, possibly 3.3.0.13 and earlier, allows remote attackers to ex…
CVE-2014-1942
Published Apr 2, 2014Cross-site scripting (XSS) vulnerability in aal/loginverification.aspx in Pearson eSIS Enterprise Student Information System allows remote attackers to inject arbitrary web script…
Showing 1-5 of 5 CVEsPage 1 of 1