Edx Open Edx — known CVE vulnerabilities

Every CVE whose affected-product data names Edx Open Edx, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2015-2286 — CVSS 6.5 (medium): lms/templates/footer-edx-new.html in Open edX edx-platform before 2015-01-29 does not properly restrict links on the password-reset page…
• CVE-2019-20513 — CVSS 6.1 (medium): Open edX Ironwood.1 allows support/certificates?user= reflected XSS.
• CVE-2022-32195 — CVSS 6.1 (medium): Open edX platform before 2022-06-06 allows XSS via the "next" parameter in the logout URL.