Vulnerabilities in Three Learning
16 resultsVexday analysis
Three Learning registra 16 vulnerabilidades na base, com 15 publicadas nos últimos 90 dias, indicando pressão recente significativa. Embora nenhuma vulnerabilidade esteja sob ataque ativo explorado (KEV), cinco vulnerabilidades críticas e a predominância de injeção SQL (CWE-89) indicam superfícies de risco estruturais que demandam remediação imediata para evitar exploração em curto prazo.
CVE-2026-63230CRITICALPre-authentication error-based SQL injection vulnerabilityEPSS 0.3%CVE-2026-63229CRITICALPre-authentication blind SQL injection vulnerabilityEPSS 0.3%CVE-2026-63234CRITICALSQL injection and unsafe deserialisation vulnerabilityEPSS 0.3%CVE-2026-63232CRITICALSQL injection and unsafe deserialisation vulnerabilityEPSS 0.3%CVE-2026-63233CRITICALSQL injection and unsafe deserialisation vulnerabilityEPSS 0.3%CVE-2026-63231HIGHPost-authentication SQL injection vulnerabilityEPSS 0.3%CVE-2026-63238MEDIUMAuthentication bypass vulnerabilityEPSS 0.2%CVE-2026-63235LOWImproper access control vulnerabilityEPSS 0.2%CVE-2026-63240MEDIUMInformation disclosure vulnerabilityEPSS 0.2%CVE-2026-3007MEDIUMStored Cross-Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-63236LOWImproper access control vulnerabilityEPSS 0.2%CVE-2026-63242MEDIUMBusiness logic vulnerabilityEPSS 0.2%CVE-2026-63241LOWInsecure direct object reference vulnerabilityEPSS 0.1%CVE-2026-63228LOWUnrestricted image upload vulnerabilityEPSS 0.1%CVE-2026-63239MEDIUMHard-coded AWS IAM credentials vulnerabilityEPSS 0.1%CVE-2026-63237MEDIUMTOTP two-factor authentication bypass vulnerabilityEPSS 0.1%