Project Redcap is a specialized data-capture and management platform deployed across research institutions and clinical environments, presenting a focused but strategically important attack surface within academic and healthcare settings. Vulnerabilities affecting the platform have centered on its web-application and data-handling layer; defenders should prioritize patches for this widely trusted institutional tool and monitor for supply-chain dependencies within their research infrastructure. Current severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Project Redcap over time
Signals from CVEs in this vendor scope (6 CVEs).
6 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2013-4610HIGH Unspecified vulnerability in the Data Search utility in data-entry forms in REDCap before 5.0.3 and 5.1.x before 5.1.2 has unknown impact and remote attack vectors. | Jun 17, 2013 | 10.0 | 28 | NO | NO |
CVE-2013-4611HIGH Multiple unspecified vulnerabilities in REDCap before 5.1.1 allow remote attackers to have an unknown impact via vectors involving (1) the Online Designer page or (2) the Manage Su | Jun 17, 2013 | 10.0 | 25 | NO | NO |
CVE-2012-6567MEDIUM REDCap before 4.14.0 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the logic of a custom rule. | Jun 17, 2013 | 6.5 | 20 | NO | NO |
CVE-2013-4609MEDIUM REDCap before 5.0.4 and 5.1.x before 5.1.3 does not reject certain undocumented syntax within branching logic and calculations, which allows remote authenticated users to bypass in | Jun 17, 2013 | 6.5 | 18 | NO | NO |
CVE-2013-4612MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in REDCap before 5.1.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving different | Jun 17, 2013 | 4.3 | 14 | NO | NO |
CVE-2013-4608MEDIUM Cross-site scripting (XSS) vulnerability in REDCap before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via vectors involving the Graphical Data View & Descr | Jun 17, 2013 | 4.3 | 14 | NO | NO |
Signals from CVEs in this vendor scope (6 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Project Redcap.
Media articles that mention a CVE ID that affects a product developed by Project Redcap — matched by CVE ID, not by vendor name.