Known vulnerabilities in DotNetNuke - page 2

Vendor: DNN
Software: DotNetNuke
Software CPE: cpe:2.3:a:dnn:dotnetnuke:*:*:*:*:*:*:*:*
Total vulnerabilities: 55
Public exploits: 5
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting DotNetNuke DotNetNuke is affected by 55 known vulnerabilities: 7 high, 11 medium, 37 low Critical High Medium Low

Vulnerabilities (55)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117784 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-48378
CWE-79 Low
No
No
9.13.9 29.10.2025 SB2025102934
#VU116021 - Improper input validation
CVE-2025-59535
CWE-20 Medium
No
No
10.1.0 23.09.2025 SB2025092348
#VU116020 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-59545
CWE-79 Low
No
No
10.1.0 23.09.2025 SB2025092348
#VU116019 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-59539
CWE-79 Low
No
No
10.1.0 23.09.2025 SB2025092348
#VU116018 - Exposure of sensitive information to an unauthorized actor
CVE-2025-59547
CWE-200 Medium
No
No
10.1.0 23.09.2025 SB2025092348
#VU116017 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-59546
CWE-79 Low
No
No
10.1.0 23.09.2025 SB2025092348
#VU116016 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-59821
CWE-79 Low
No
No
10.1.0 23.09.2025 SB2025092348
#VU116015 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-59548
CWE-79 Low
No
No
10.1.0 23.09.2025 SB2025092348
#VU112985 - Exposure of sensitive information to an unauthorized actor
CVE-2025-52488
CWE-200 High
Available
No
10.0.1 16.07.2025 SB20250716115
#VU112984 - Improper Check for Unusual or Exceptional Conditions
CVE-2025-52487
CWE-754 High
No
No
10.0.1 16.07.2025 SB20250716115
#VU112983 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-52486
CWE-79 Low
No
No
10.0.1 16.07.2025 SB20250716115
#VU112982 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-52485
CWE-79 Low
No
No
10.0.1 16.07.2025 SB20250716115
#VU146076 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-48377
CWE-79 Low
No
No
9.13.9 23.05.2025 SB2025102934
#VU146077 - Improper Access Control
CVE-2025-48376
CWE-284 Low
No
No
9.13.9 23.05.2025 SB2025102934
#VU146075 - Improper input validation
CVE-2025-32374
CWE-20 Medium
No
No
9.13.8 08.04.2025 SB20250408101
#VU146078 - Improper Access Control
CVE-2025-32373
CWE-284 Low
No
No
9.13.8 08.04.2025 SB20250408101
#VU146081 - Server-Side Request Forgery (SSRF)
CVE-2025-32372
CWE-918 Medium
No
No
9.13.8 08.04.2025 SB20250408101
#VU146082 - Improper input validation
CVE-2025-32371
CWE-20 Low
No
No
9.13.4 08.04.2025 SB20250408103
#VU146083 - Improper Access Control
CVE-2025-32036
CWE-284 Low
No
No
9.13.8 08.04.2025 SB20250408101
#VU146084 - Improper input validation
CVE-2025-32035
CWE-20 Low
No
No
9.13.2 08.04.2025 SB20250408102


Showing elements 21 - 40 out of 55