CVE-2020-25902

Severity: medium (CVSS 6.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-03-02 · updated 2026-06-17
Weakness: CWE-79

Description

Blackboard Collaborate Ultra 20.02 is affected by a cross-site scripting (XSS) vulnerability. The XSS payload will execute on the class room, which leads to stealing cookies from users who join the class. NOTE: Third-parties dispute the validity of this entry as a possible false positive during research

Affected products

Blackboard Collaborate Ultra: 20.02

References

https://github.com/Lawyer-1/Turki/blob/main/CVE-2020-25902.md
https://www.blackboard.com/teaching-learning/collaboration-web-conferencing/blackboard-collaborate
https://github.com/Lawyer-1/Turki/blob/main/CVE-2020-25902.md
https://www.blackboard.com/teaching-learning/collaboration-web-conferencing/blackboard-collaborate

Get alerted when CVE-2020-25902 or the next vulnerability affects your stack