Jenzabar develops a focused line of higher-education administrative and student-information systems, with its Internet Campus Solution serving as a core platform for enrollment, finance, and institutional data management. The observed vulnerabilities cluster around web-application input handling and credential management, including cross-site scripting, session fixation, unrestricted file uploads, and hard-coded credentials—characteristic weaknesses of web-facing administrative software that manages sensitive student and institutional data. Current severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Jenzabar over time
Signals from CVEs in this vendor scope (5 CVEs).
5 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-26723MEDIUM Jenzabar 9.2.x through 9.2.2 allows /ics?tool=search&query= XSS. | Feb 6, 2021 | 6.1 | 37 | NO | YES |
CVE-2020-8434CRITICAL Jenzabar JICS (aka Internet Campus Solution) before 9.0.1 Patch 3, 9.1 before 9.1.2 Patch 2, and 9.2 before 9.2.2 Patch 8 has session cookies that are a deterministic function of t | May 19, 2020 | 9.8 | 29 | NO | NO |
CVE-2019-10011CRITICAL ICS/StaticPages/AddTestUsers.aspx in Jenzabar JICS (aka Internet Campus Solution) before 2019-02-06 allows remote attackers to create an arbitrary number of accounts with a passwor | Mar 25, 2019 | 9.8 | 29 | NO | NO |
CVE-2019-10012HIGH Jenzabar JICS (aka Internet Campus Solution) before 9 allows remote attackers to upload and execute arbitrary .aspx code by placing it in a ZIP archive and using the MoxieManager ( | Mar 25, 2019 | 7.5 | 25 | NO | NO |
CVE-2018-16778MEDIUM Cross-site scripting (XSS) vulnerability in Jenzabar v8.2.1 through 9.2.0 allows remote attackers to inject arbitrary web script or HTML via the query parameter (aka the Search Fie | Dec 21, 2018 | 6.1 | 21 | NO | NO |
Signals from CVEs in this vendor scope (5 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Jenzabar.
Media articles that mention a CVE ID that affects a product developed by Jenzabar — matched by CVE ID, not by vendor name.