Login Request a demo
OP
Product
Openolat
by Frentix · last CVE Mar 30, 2026
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 1High 6Medium 2Low 0
Severity
All severities9Critical1High6Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Openolat to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-31946
9.8
0%
Mar 30
OpenOLAT: Authentication bypass via forged JWT in OIDC implicit flow
Affected: 10.5.4 before 20.2.5
CVE-2026-28228
8.8
0%
Mar 30
OpenOLAT: Server-Side Template Injection (SSTI) in Velocity templates allows Remote Code Execution
Affected: before 19.1.31; 20.0.0 before 20.1.18; 20.2.0 before 20.2.5
CVE-2021-39181
8.8
2%
Sep 1
OpenOlat is a web-based learning management system (LMS)
Affected: before 15.3.18; 15.5.0 before 15.5.3
CVE-2021-39180
8.8
2%
Aug 31
OpenOLAT is a web-based learning management system (LMS)
Affected: before 15.3.18; 15.4.0 before 15.5.3
CVE-2021-41242
8.1
1%
Dec 10
OpenOlat is a web-basedlearning management system
Affected: before 15.5.12; 16.0.0 before 16.0.5
CVE-2021-41152
7.7
1%
Oct 18
OpenOlat is a web-based e-learning platform for teaching, learning, assessment and communication, an LMS, a learning management system
Affected: before 15.5.8
CVE-2024-28198
7.5
0%
Mar 11
XML external entity (XXE) injection in OpenOLAT
Affected: before 18.1.6
CVE-2024-25974
5.4
1%
Feb 20
Stored Cross-Site Scripting (XSS) within the Media Center
Affected: before 18.1.6
CVE-2024-25973
5.4
1%
Feb 20
Multiple Stored Cross-Site Scripting Vulnerabilities
Affected: before 18.1.6
Showing 9