CVE-2015-4689: Ellucian Banner Student

Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days.

Ellucian (formerly SunGard) Banner Student 8.5.1.2 through 8.7 allows remote attackers to reset arbitrary passwords via unspecified vectors, aka "Weak Password Reset."

Affected products

• Ellucian Banner Student: version 8.5.1.2 only; version 8.6.1 only; version 8.6.2 only; version 8.6.3 only; version 8.6.4 only; version 8.6.5 only; …

Published 2017-09-11. Last modified 2026-06-17.