2015.12.01

DATE	CVE	VULNERABILITY TITLE	RISK
2024-01-13	CVE-2024-22209	Unspecified vulnerability in EDX Edx-Platform Open edX Platform is a service-oriented platform for authoring and delivering online learning. network low complexity edx	8.8
2019-07-30	CVE-2018-20859	Cross-site Scripting vulnerability in EDX Edx-Platform edx-platform before 2018-07-18 allows XSS via a response to a Chemical Equation advanced problem. network low complexity edx CWE-79	6.1
2019-07-30	CVE-2017-18381	Unspecified vulnerability in EDX Edx-Platform The installation process in Open edX before 2017-01-10 exposes a MongoDB instance to external connections with default credentials. network low complexity edx	7.2
2019-07-30	CVE-2017-18380	Improper Access Control vulnerability in EDX Edx-Platform edx-platform before 2017-08-03 allows attackers to trigger password-reset e-mail messages in which the reset link has an attacker-controlled domain name. network low complexity edx CWE-284	7.5
2019-07-29	CVE-2016-10766	Cross-Site Request Forgery (CSRF) vulnerability in EDX Edx-Platform edx-platform before 2016-06-06 allows CSRF. network low complexity edx CWE-352	8.8
2019-07-29	CVE-2016-10765	Improper Input Validation vulnerability in EDX Edx-Platform edx-platform before 2016-06-10 allows account activation with a spoofed e-mail address. network low complexity edx CWE-20	5.3