Cpe:2.3:a:ellucian:webadvisor:3.2:*:*:*:*:*:*:*

Ellucian WebAdvisor 3.2 is vulnerable to an unauthenticated XXE injection, enabling remote attackers to perform SSRF, steal NTLMv2 hashes, and conduct arbitrary file read operations.