Skip to content
bugbounty.fyi
Get paid to secure open source 475 paid open-source programs on Sorona, up to $1M Perk Low bugs: $100 or 1 mo Claude Max

Also on Patchstack. All 476 paid open-source programs

Try

Highest paying Newly launched Paid without KYC Full safe harbor
All results

About this site

Blackboard bug bounty programs

blackboard.com Updated

Blackboard runs one public program: a self-hosted disclosure program with no cash rewards.

Top reward
No cash
Disclosure only
Programs
1
None pays cash
Targets in scope
10
1 type
Last change
None yet
Tracked since Nov 2026

Where to report

The one public program Blackboard runs.

  • Blackboard

    Self-hosted · Disclosure only

    Open

    Top reward

    No cash
    Safe harbor
    None

Amounts are the top reward per severity in the currency each program pays. First response is the platform's measured average when it publishes one, else what the policy promises.

What is in scope

10 targets.

  • Blackboard Ally

    Products and areas No bounty

  • Blackboard Evaluate

    Products and areas No bounty

  • Blackboard Illuminate

    Products and areas No bounty

  • Blackboard LMS

    Products and areas No bounty

  • Blackboard Milestone

    Products and areas No bounty

  • Blackboard Outcomes

    Products and areas No bounty

  • Blackboard Planning

    Products and areas No bounty

  • Blackboard Program Review

    Products and areas No bounty

  • Blackboard SafeAssign

    Products and areas No bounty

  • Institution/Organization Name

    Products and areas No bounty

No target matches. Try part of a host name, such as the company name.

Recent changes

Reward and scope changes across every Blackboard program, newest first.

No changes recorded yet. New targets and reward moves show up here and in the RSS feed.

Recent CVEs

Published vulnerabilities in Blackboard products, from the NVD.

Search NVD
  • CVE-2022-39196 Medium

    Blackboard Learn 1.10.1 allows remote authenticated users to read unintended files by entering student credentials and then directly visiting a certain webapps/bbcms/execute/ URL. Note: The vendor disputes this stating this cannot be reproduced.

  • CVE-2021-36746 Medium

    Blackboard Learn through 9.1 allows XSS by an authenticated user via the Assignment Instructions HTML editor.

  • CVE-2021-36747 Medium

    Blackboard Learn through 9.1 allows XSS by an authenticated user via the Feedback to Learner form.

  • CVE-2020-25902 Medium

    Blackboard Collaborate Ultra 20.02 is affected by a cross-site scripting (XSS) vulnerability. The XSS payload will execute on the class room, which leads to stealing cookies from users who join the class. NOTE: Third-parties dispute the validity of this entry as a possible false positive during research

  • CVE-2020-9008 Medium

    Stored Cross-site scripting (XSS) vulnerability in Blackboard Learn/PeopleTool v9.1 allows users to inject arbitrary web script via the Tile widget in the People Tool profile editor.

  • CVE-2018-13257 Medium

    The bb-auth-provider-cas authentication module within Blackboard Learn 2018-07-02 is susceptible to HTTP host header spoofing during Central Authentication Service (CAS) service ticket validation, enabling a phishing attack from the CAS server login page.

  • CVE-2017-18262 Medium

    Blackboard Learn (Since at least 17th of October 2017) has allowed Unvalidated Redirects on any signed-in user through its endpoints for handling Shibboleth logins, as demonstrated by a webapps/bb-auth-provider-shibboleth-BBLEARN/execute/shibbolethLogin?returnUrl= URI.

  • CVE-2014-0811 Medium

    Cross-site scripting (XSS) vulnerability in Blackboard Vista/CE 8.0 SP6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

About this page

This page gathers every public program listed under blackboard.com: platform programs, self-hosted policies and security.txt contacts. Each program's own policy decides what is in scope and what it pays; check it before you test.

Something wrong or missing? Report a correction.