ZeusQA
Start free

Known exploited vulnerabilities

DotNetNuke (DNN) vulnerabilities attackers have used

Every DotNetNuke (DNN) vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 3 DotNetNuke (DNN) vulnerabilities as exploited in the wild, 0 of them added in the last 12 months and 1 used in ransomware campaigns. The most recent is CVE-2018-18325, added Nov 3, 2021. DotNetNuke (DNN) has the most entries (3).

In KEV, all time
3
Added, last 12 months
0
Used in ransomware
1
New CVEs this week
0

Every DotNetNuke (DNN) entry in CISA KEV

  1. CVE-2018-18325

    Added · due

    DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability

    DotNetNuke (DNN) contains an inadequate encryption strength vulnerability resulting from the use of a weak encryption algorithm to protect input parameters. This CVE ID resolves an incomplete patch for CVE-2018-15811.

  2. CVE-2018-15811

    Added · due

    DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability

    DotNetNuke (DNN) contains an inadequate encryption strength vulnerability resulting from the use of a weak encryption algorithm to protect input parameters.

  3. CVE-2017-9822

    RansomwareAdded · due

    DotNetNuke (DNN) Remote Code Execution Vulnerability

    DotNetNuke (DNN) contains a vulnerability that may allow for remote code execution via cookie deserialization.

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works