Microsoft ASP.NET Core
11 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2020-0603 | 2.1 ; 3.0 ; 3.1 | A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who su | HIGH 8.8 | 21 % | ||
| CVE-2020-0602 | 2.1 ; 3.0 ; 3.1 | A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerabilit | HIGH 7.5 | 7.6 % | ||
| CVE-2019-1302 | 2.1 ; 2.2 ; 3.0 | An elevation of privilege vulnerability exists when a ASP.NET Core web application, created using vulnerable project templates, fails to pro | HIGH 8.8 | 4.8 % | ||
| CVE-2019-1075 | 2.1 ; 2.2 | A spoofing vulnerability exists in ASP.NET Core that could lead to an open redirect, aka 'ASP.NET Core Spoofing Vulnerability'. | MEDIUM 6.1 | 2.6 % | ||
| CVE-2019-0982 | 2.1 ; 2.2 | A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerabilit | HIGH 7.5 | 6.7 % | ||
| CVE-2019-0815 | 2.2 | A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerabilit | HIGH 7.5 | 7.0 % | ||
| CVE-2019-0564 | 2.1 | A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerabilit | HIGH 7.5 | 8.4 % | ||
| CVE-2019-0548 | 2.1 ; 2.2 | A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka "ASP.NET Core Denial of Service Vulnerabilit | HIGH 7.5 | 8.2 % | ||
| CVE-2018-8409 | 2.1 | A denial of service vulnerability exists when System.IO.Pipelines improperly handles requests, aka "System.IO.Pipelines Denial of Service." | HIGH 7.5 | 6.6 % | ||
| CVE-2018-8356 | 1.0 ; 1.1 ; 2.0 | A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Fr | MEDIUM 5.5 | 0.7 % | ||
| CVE-2018-8171 | 1.0 ; 1.1 ; 2.0 | A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Securit | HIGH 7.5 | 11 % |