Known vulnerabilities in ASP.NET Core MVC - page 2

Vendor: Microsoft
Software: ASP.NET Core MVC
Software CPE: cpe:2.3:a:microsoft:aspnet_core_mvc:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 40
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ASP.NET Core MVC ASP.NET Core MVC is affected by 40 known vulnerabilities: 4 high, 13 medium, 23 low Critical High Medium Low

Vulnerabilities (40)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU15290 - Exposure of sensitive information to an unauthorized actor
CVE-2018-8292		 CWE-200 Medium
No
No
 - 10.10.2018 SB2018101014
SB2023091207
SB2025052070
#VU13769 - Permissions, Privileges, and Access Controls
CVE-2018-8356		 CWE-264 Low
No
No
 - 10.07.2018 SB2018071011
#VU13773 - Permissions, Privileges, and Access Controls
CVE-2018-8171		 CWE-264 Low
No
No
 - 10.07.2018 SB2018071011
#VU12472 - Improper input validation
CVE-2018-0765		 CWE-20 Medium
No
No
 - 08.05.2018 SB2018050815
#VU11028 - Improper input validation
CVE-2018-0787		 CWE-20 Low
No
No
 - 13.03.2018 SB2018031316
#VU11027 - Improper input validation
CVE-2018-0808		 CWE-20 Low
No
No
 - 13.03.2018 SB2018031316
#VU11030 - Improper input validation
CVE-2018-0875		 CWE-20 Low
No
No
 - 13.03.2018 SB2018031316
SB2018031317
SB2018031510
#VU9900 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-0764		 CWE-611 Low
No
No
 - 09.01.2018 SB2018010908
SB2018010909
#VU9899 - Improper input validation
CVE-2018-0786		 CWE-20 Low
No
No
 - 09.01.2018 SB2018010908
SB2018010909
#VU9897 - Cross-Site Request Forgery (CSRF)
CVE-2018-0785		 CWE-352 Low
No
No
 - 09.01.2018 SB2018010908
#VU9895 - Improper input validation
CVE-2018-0784		 CWE-20 Low
No
No
 - 09.01.2018 SB2018010908
#VU9309 - Improper input validation
CVE-2017-11770		 CWE-20 Low
No
No
 - 14.11.2017 SB2017111420
#VU9308 - Exposure of sensitive information to an unauthorized actor
CVE-2017-8700		 CWE-200 Low
No
No
 - 14.11.2017 SB2017111420
#VU9307 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2017-11879		 CWE-601 Low
No
No
 - 14.11.2017 SB2017111420
#VU9306 - Improper input validation
CVE-2017-11883		 CWE-20 Low
No
No
 - 14.11.2017 SB2017111420
#VU6543 - Improper input validation
CVE-2017-0256		 CWE-20 Low
No
No
 - 15.05.2017 SB2017051016
#VU6542 - Improper input validation
CVE-2017-0249		 CWE-20 Low
No
No
 - 15.05.2017 SB2017051016
#VU6541 - Improper input validation
CVE-2017-0247		 CWE-20 Medium
No
No
 - 15.05.2017 SB2017051016
#VU5506 - Memory corruption
 CWE-119 Low
No
No
 - 27.01.2017 SB2017013001
#VU653 - Permissions, Privileges, and Access Controls
 CWE-264 Medium
No
No
 - 23.09.2016 SB2016091401


Showing elements 21 - 40 out of 40