What’s Vulnerable › Products

openedx edx-platform vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your openedx edx-platform version is affected

Latest openedx edx-platform vulnerabilities

• CVE-2025-68270 — CourseLimitedStaff Role Allows Studio Access (CVSS 9.9)
• CVE-2025-47942 — Learners on edX Platform can download python_lib.zip (CVSS 5.3)
• CVE-2024-22209 — XBlock custom auth does not respect JWT Scopes (CVSS 8.8)
• CVE-2021-39248 — (CVSS 6.1)
• CVE-2018-20859 — (CVSS 6.1)
• CVE-2017-18381 — (CVSS 7.2)
• CVE-2017-18380 — (CVSS 7.5)
• CVE-2016-10766 — (CVSS 8.8)
• CVE-2016-10765 — (CVSS 5.3)
• CVE-2015-6960 — (CVSS 6.1)
• CVE-2015-6253 — (CVSS 5.4)
• CVE-2015-5601 — (CVSS 8.8)
• CVE-2015-2186 — (CVSS 7.5)
• CVE-2015-6671 — (CVSS 5.9)