Sploitus

29 exploited vulnerabilities in Redcap

Vulnerabilities with publicly known exploits

Vendors
Redcap, Vanderbilt, Vanderbilt University
With known exploits
29
Affected Vanderbilt Redcap versions
< 11.4.0, 8.10.2, 9.1.2

Vulnerabilities with exploits

Highest CVSS first — 2 of these already have exploit code on Sploitus

CVE-2020-26712
CVSS 10.0 CRITICAL 2021-01-12
CVE-2023-38825
CVSS 9.8 CRITICAL 2024-03-06FIX AVAILABLE
CVE-2021-42136 4 exploits
CVSS 9.0 CRITICAL 2022-04-13FIX AVAILABLE
REDCap 11.3.9 - Stored Cross Site Scripting VulnerabilityREDCap 11.3.9 - Stored Cross Site Scripting
CVE-2025-23113
CVSS 8.8 HIGH 2025-01-10
CVE-2024-56311
CVSS 8.8 HIGH 2024-12-22
CVE-2024-56310
CVSS 8.8 HIGH 2024-12-22
CVE-2019-14937
CVSS 7.5 HIGH 2019-08-17FIX AVAILABLE
CVE-2025-23112
CVSS 6.1 MEDIUM 2025-01-10
CVE-2025-23111
CVSS 6.1 MEDIUM 2025-01-10
CVE-2025-23110
CVSS 6.1 MEDIUM 2025-01-10
CVE-2024-45527
CVSS 6.1 MEDIUM 2024-09-01FIX AVAILABLE
CVE-2022-42715
CVSS 6.1 MEDIUM 2022-10-12FIX AVAILABLE
CVE-2020-26713
CVSS 6.1 MEDIUM 2021-01-12FIX AVAILABLE
CVE-2024-37394
CVSS 5.4 MEDIUM 2025-06-10FIX AVAILABLE
CVE-2024-37396
CVSS 5.4 MEDIUM 2025-06-10FIX AVAILABLE
CVE-2024-37395
CVSS 5.4 MEDIUM 2025-06-10FIX AVAILABLE
CVE-2024-56377
CVSS 5.4 MEDIUM 2025-01-09
CVE-2024-56376
CVSS 5.4 MEDIUM 2025-01-09
CVE-2024-56314
CVSS 5.4 MEDIUM 2024-12-22FIX AVAILABLE
CVE-2024-56313
CVSS 5.4 MEDIUM 2024-12-22FIX AVAILABLE
CVE-2024-56312
CVSS 5.4 MEDIUM 2024-12-22FIX AVAILABLE
CVE-2023-37798
CVSS 5.4 MEDIUM 2023-09-07
CVE-2022-24127
CVSS 5.4 MEDIUM 2022-06-15FIX AVAILABLE
CVE-2022-24004
CVSS 5.4 MEDIUM 2022-06-15FIX AVAILABLE
CVE-2020-27359
CVSS 5.4 MEDIUM 2020-10-31FIX AVAILABLE
CVE-2024-55374
CVSS 5.3 MEDIUM 2026-01-02
CVE-2019-13029 4 exploits
CVSS 4.8 MEDIUM 2019-07-11FIX AVAILABLE
REDCap < 9.1.2 - Cross-Site Scripting VulnerabilityREDCap 9.1.2 - Cross-Site Scripting
CVE-2020-27358
CVSS 4.3 MEDIUM 2020-10-31FIX AVAILABLE
CVE-2023-37361
CVSS 2.7 LOW 2023-07-25FIX AVAILABLE