[ Vendor · 3 CVEs ]
DotNetNuke (DNN)
CVEs affecting DotNetNuke (DNN) published in the last 30 days, plus any DotNetNuke (DNN) CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2018-15811 | 3 Jul 2019 | CVSS 7.5 | DotNetNuke (DNN) Inadequate Encryption StrengthDNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters. | Exploited |
| CVE-2018-18325 | 3 Jul 2019 | CVSS 7.5 | DotNetNuke (DNN) Inadequate Encryption StrengthDNN (aka DotNetNuke) 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue exists because of an incomplete… | Exploited |
| CVE-2017-9822 | 20 Jul 2017 | CVSS 8.8 | DotNetNuke (DNN) Remote Code ExecutionDNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code execution on DNN sites." | Exploited |