Known vulnerabilities in ASP.NET Core MVC

Vendor: Microsoft
Software: ASP.NET Core MVC
Software CPE: cpe:2.3:a:microsoft:aspnet_core_mvc:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 40
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ASP.NET Core MVC ASP.NET Core MVC is affected by 40 known vulnerabilities: 4 high, 13 medium, 23 low Critical High Medium Low

Vulnerabilities (40)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU55694 - Improper input validation
CVE-2021-26423		 CWE-20 Medium
No
No
 - 10.08.2021 SB2021081011
SB2021081225
SB2021081226
and 4 more
#VU55693 - Exposure of sensitive information to an unauthorized actor
CVE-2021-34485		 CWE-200 Low
No
No
 - 10.08.2021 SB2021081011
SB2021081225
SB2021081226
and 7 more
#VU55692 - Exposure of sensitive information to an unauthorized actor
CVE-2021-34532		 CWE-200 Low
No
No
 - 10.08.2021 SB2021081011
SB2021081225
SB2021081226
and 4 more
#VU50496 - Improper input validation
CVE-2021-26701		 CWE-20 High
No
No
 - 09.02.2021 SB2021020950
SB2021031210
SB2021031211
and 18 more
#VU50495 - Improper input validation
CVE-2021-24112		 CWE-20 High
No
No
 - 09.02.2021 SB2021020950
SB2021032605
SB2021032606
and 9 more
#VU50494 - Improper input validation
CVE-2021-1721		 CWE-20 Medium
No
No
 - 09.02.2021 SB2021020950
SB2021021211
SB2021021212
and 12 more
#VU49404 - Improper input validation
CVE-2021-1723		 CWE-20 Medium
No
No
 - 12.01.2021 SB2021011215
SB2021011313
SB2021011314
and 6 more
#VU46500 - Improper input validation
CVE-2020-1045		 CWE-20 Medium
No
No
 - 08.09.2020 SB2020090864
SB2020090902
SB2020090903
and 2 more
#VU45514 - Improper input validation
CVE-2020-1597		 CWE-20 Medium
No
No
 - 11.08.2020 SB2020081206
SB2020081281
SB2020081282
and 3 more
#VU29836 - XML Injection
CVE-2020-1147		 CWE-91 High
Available
Exploited
 - 14.07.2020 SB2020071463
SB20200716119
SB20200716120
and 6 more
#VU27827 - Improper input validation
CVE-2020-1161		 CWE-20 Medium
No
No
 - 12.05.2020 SB2020051244
SB2020052207
SB2020052208
#VU27823 - Improper input validation
CVE-2020-1108		 CWE-20 Medium
No
No
 - 12.05.2020 SB2020051240
SB2020051421
SB2020051422
and 9 more
#VU24289 - Improper input validation
CVE-2020-0602		 CWE-20 Medium
No
No
 - 14.01.2020 SB2020011436
SB2020011624
SB2020011634
#VU24288 - Out-of-bounds write
CVE-2020-0603		 CWE-787 High
Available
No
 - 14.01.2020 SB2020011436
SB2020011624
SB2020011634
#VU18210 - Improper input validation
CVE-2019-0815		 CWE-20 Medium
No
No
 - 10.04.2019 SB2019041017
#VU17638 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2019-0657		 CWE-451 Low
No
No
 - 12.02.2019 SB2019021312
SB2019021315
#VU16870 - Improper input validation
CVE-2019-0564		 CWE-20 Low
No
No
 - 08.01.2019 SB2019010815
#VU16868 - Exposure of sensitive information to an unauthorized actor
CVE-2019-0545		 CWE-200 Low
No
No
 - 08.01.2019 SB2019010814
#VU16869 - Improper input validation
CVE-2019-0548		 CWE-20 Low
No
No
 - 08.01.2019 SB2019010815
#VU15881 - Unrestricted Upload of File with Dangerous Type
CVE-2018-8416		 CWE-434 Low
No
No
 - 14.11.2018 SB2018111406
SB2024100809


Showing elements 1 - 20 out of 40