Skip to content
OpenAdvisories

Product · Microsoft

ASP.NET

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2018-8171 EPSS 11%

    Security feature bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated

    A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Security Feature Bypass Vulnerability." This affects ASP.NET, ASP.NET Core 1.1, ASP.NET Core 1.0, ASP.NET Core 2.0, ASP.NET MV…

    Microsoft ASP.NET Core ASP.NET ASP.NET MVC 5.2 NuGet
  • High 7.5
    CVE-2017-11883

    Denial of service in ASP.NET Core

    .NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly handling web requests, aka ".NET CORE Denial Of Service Vulnerability".

    Microsoft ASP.NET Microsoft.AspNetCore.Server.HttpSys Microsoft.Net.Http.Server NuGet