CVE-2022-39196: Blackboard Learn

Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Blackboard Learn 1.10.1 allows remote authenticated users to read unintended files by entering student credentials and then directly visiting a certain webapps/bbcms/execute/ URL. Note: The vendor disputes this stating this cannot be reproduced.

Affected products

• Blackboard Blackboard Learn: version 1.10.1 only

Published 2022-09-05. Last modified 2026-06-17.