← gociux.comall vendors

Vendor scorecard

DotNetNuke (DNN) exploited vulnerabilities: 3 in CISA KEV, 0 in the last 12 months

Gociux · updated with each KEV addition · latest 3 Nov 2021

CISA lists 3 DotNetNuke (DNN) vulnerabilities as exploited in the wild, 0 of them added in the last 12 months (flat from 0 in the 12 months before). 1 (33%) are known to be used in ransomware campaigns. Most affected: DotNetNuke (DNN) (3).

3in CISA KEV
0last 12 months
33%ransomware-linked
n/apublication → KEV (median)

Exploited CVEs added per year

300000
202120222023202420252026

Most affected products

ProductKEV entries
DotNetNuke (DNN)3

Every exploited DotNetNuke (DNN) CVE

CVEVulnerabilityAdded
CVE-2018-18325DotNetNuke (DNN) Inadequate Encryption Strength VulnerabilityDotNetNuke (DNN)3 Nov 2021
CVE-2018-15811DotNetNuke (DNN) Inadequate Encryption Strength VulnerabilityDotNetNuke (DNN)3 Nov 2021
CVE-2017-9822DotNetNuke (DNN) Remote Code Execution VulnerabilityRANSOMWAREDotNetNuke (DNN)3 Nov 2021

Get an email when CISA adds the next DotNetNuke (DNN) CVE.

How to read this: CISA KEV lists vulnerabilities with reliable evidence of exploitation; a vendor with many entries is often one with a large, internet-facing install base, not necessarily worse engineering. "Publication → KEV" is the median number of days between the CVE's publication and its addition to KEV, for entries added in the last 24 months (0 entries); it is an upper bound on how long defenders had, since exploitation usually starts before the listing. Under NIS2 article 21(2)(d), supplier security is part of your risk management; this page is a starting point for that review. Compare vendors on the scorecard index.

Reviewing DotNetNuke (DNN) as a supplier?

We assess supplier security for NIS2 and DORA, from exploited-CVE history and patch response to contract clauses and evidence packs.

Get in touch →