i
ilias
Security Risk Profile
69
/100
highSecurity Risk Score
Comprehensive risk assessment based on 45 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from November 5, 2007 to present
45
Total CVEs
16
Critical+High
0
Exploited
11
Unpatched
Threat Assessment
Avg CVSS
6.7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
11
Critical/High
Risk Level
69/100
high
🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
7High
9Medium
27Low
2Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XSS
22
2
SQL Injection
2
3
Input Validation
2
4
Code Injection
2
5
OS Command Injection
2
Most Affected Products
1. ILIAS ILIAS110
2. ILIAS ILIAS Learning Management System2
3. ILIAS ILIAS 71
4. ILIAS ILIAS 81
5. ILIAS ILIAS 9.01
Recent Vulnerabilities
See more →CVE-2026-80428
CVSS 9.3critical
ILIAS before 9.22, 10.10 and 11.3 Unauthenticated PHP Object Injection via Shibboleth Logout Endpoint
Aug 26, 2026🔧 No Patch
CVE-2026-12789
CVSS 2.0low
ILIAS Learning Management System Learning Progress Tracking class.ilTrQuery.php executeQueries sql injection
Jun 21, 2026🔧 No Patch
CVE-2020-36944
CVSS 6.9medium
ILIAS Learning Management System 4.3 - SSRF
Jan 28, 2026🔧 No Patch
CVE-2025-11346
CVSS 9.8critical
ILIAS Base64 Decoding unserialize deserialization
Oct 6, 2025🔧 No Patch
CVE-2025-11345
CVSS 9.8critical
ILIAS Test Import unserialize deserialization
Oct 6, 2025🔧 No Patch
CVE-2025-11344
CVSS 9.8critical
ILIAS Certificate Import code injection
Oct 6, 2025🔧 No Patch
CVE-2024-33525
CVSS 4.3medium
May 21, 2024🔧 No Patch
CVE-2024-33528
CVSS 4.7medium
May 21, 2024
CVE-2024-33527
CVSS 5.4medium
May 21, 2024
CVE-2024-33526
CVSS 7.1high
May 21, 2024
Monitor ilias in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.