Known vulnerabilities in DotNetNuke - page 3

Vendor: DNN
Software: DotNetNuke
Software CPE: cpe:2.3:a:dnn:dotnetnuke:*:*:*:*:*:*:*:*
Total vulnerabilities: 55
Public exploits: 5
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting DotNetNuke DotNetNuke is affected by 55 known vulnerabilities: 7 high, 11 medium, 37 low Critical High Medium Low

Vulnerabilities (55)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU63953 - Server-Side Request Forgery (SSRF)
CVE-2021-40186
CWE-918 Medium
No
No
- 02.06.2022 SB2022060215
#VU34597 - Exposure of sensitive information to an unauthorized actor
CVE-2020-11585
CWE-200 Low
No
No
- 06.04.2020 SB2020040630
#VU26548 - Improper Authentication
CVE-2017-9822
CWE-287 High
Available
Exploited
9.1.1 02.04.2020 SB2017072022
#VU25724 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-5187
CWE-22 Medium
No
No
9.5.0 02.03.2020 SB2020030204
#VU25723 - Unrestricted Upload of File with Dangerous Type
CVE-2020-5188
CWE-434 Medium
No
No
- 02.03.2020 SB2020030205
#VU25722 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-5186
CWE-79 Low
No
No
- 02.03.2020 SB2020030205
#VU21393 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-12562
CWE-79 Low
Available
No
9.4.0 27.09.2019 SB2019093001
#VU36055 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-14486
CWE-79 Low
No
No
- 21.03.2019 SB2019032134
#VU36984 - Server-Side Request Forgery (SSRF)
CVE-2017-0929
CWE-918 High
No
No
9.2.0 03.07.2018 SB2018070308
#VU336 - Improper Access Control
CVE-2015-2794
CWE-284 High
Available
No
- 20.08.2016 SB2015052801
#VU41926 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-3943
CWE-79 Low
No
No
- 12.03.2014 SB2014031202
#VU41927 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-4649
CWE-79 Low
No
No
- 12.03.2014 SB2014031202
#VU41928 - Improper input validation
CVE-2013-7335
CWE-20 Medium
No
No
- 12.03.2014 SB2014031202
#VU44138 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-1030
CWE-79 Low
No
No
- 11.04.2012 SB2012041109
#VU44139 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2012-1036
CWE-79 Low
No
No
- 11.04.2012 SB2012041109


Showing elements 41 - 60 out of 55