CVE-2026-6881

CVE-2026-6881CVE-2026-6881

Description

A SQL Injection in the Giving Reports functionality in Ellucian Advance Web and Legacy Advance allows an authenticated attacker to extract sensitive information from databases via a crafted SQL query in the class credit field. This issue affects Advance Web: all versions; Legacy Advance: all versions. Ellucian CRM Advance is not impacted.

Scoring

Last modified2026-07-28
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.