Vanderbilt REDCap vulnerabilities
6 published CVEs name Vanderbilt REDCap among the affected products.
- 6Published CVEs6 of them scored
- 0Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-23113
An issue was discovered in REDCap 14.9.6. It has an action=myprojects&logout=1 CSRF issue in the alert-title while performing an upload of a CSV file…
Vanderbilt · REDCap
Low3.4 - CVE-2025-23112
An issue was discovered in REDCap 14.9.6. A stored cross-site scripting (XSS) vulnerability allows authenticated users to inject malicious scripts into the…
Vanderbilt · REDCap
Medium6.1 - CVE-2025-23111
An issue was discovered in REDCap 14.9.6. It allows HTML Injection via the Survey field name, exposing users to a redirection to a phishing website. An…
Vanderbilt · REDCap
Medium4.7 - CVE-2025-23110
An issue was discovered in REDCap 14.9.6. A Reflected cross-site scripting (XSS) vulnerability in the email-subject field exists while performing an upload of…
Vanderbilt · REDCap
Medium6.1 - CVE-2024-56377
A stored cross-site scripting (XSS) vulnerability in survey titles of REDCap 14.9.6 allows authenticated users to inject malicious scripts into the Survey…
Vanderbilt · REDCap
Medium5.4 - CVE-2024-56376
A stored cross-site scripting (XSS) vulnerability in the built-in messenger of REDCap 14.9.6 allows authenticated users to inject malicious scripts into the…
Vanderbilt · REDCap
Medium5.4