Known vulnerabilities in DotNetNuke 9937

Vendor: DNN
Software: DotNetNuke
Version: 9937
Software CPE: cpe:2.3:a:dnn:dotnetnuke:*:*:*:*:*:*:*:*
Total vulnerabilities: 10
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting DotNetNuke version 9937 DotNetNuke 9937 is affected by 10 vulnerabilities: 2 high, 8 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU125828 - Improper Access Control
CVE-2026-40305
CWE-284 Low
No
No
10.2.2 11.04.2026 SB2026041145
#VU122097 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-24838
CWE-79 Low
No
No
9.13.10, 10.2.0 28.01.2026 SB2026012841
#VU122096 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-24837
CWE-79 Low
No
No
9.13.10, 10.2.0 28.01.2026 SB2026012841
#VU122095 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-24836
CWE-79 Low
No
No
9.13.10, 10.2.0 28.01.2026 SB2026012841
#VU122094 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-24833
CWE-79 Low
No
No
9.13.10, 10.2.0 28.01.2026 SB2026012841
#VU122093 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-24784
CWE-79 Low
No
No
9.13.10, 10.2.0 28.01.2026 SB2026012841
#VU112985 - Exposure of sensitive information to an unauthorized actor
CVE-2025-52488
CWE-200 High
Public exploit available
No
10.0.1 16.07.2025 SB20250716115
#VU112984 - Improper Check for Unusual or Exceptional Conditions
CVE-2025-52487
CWE-754 High
No
No
10.0.1 16.07.2025 SB20250716115
#VU112983 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-52486
CWE-79 Low
No
No
10.0.1 16.07.2025 SB20250716115
#VU112982 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-52485
CWE-79 Low
No
No
10.0.1 16.07.2025 SB20250716115