Microsoft Corporation ASP.NET Core

9 vulnérabilités publiées citent ce produit.

Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.

CVEVersions vulnérablesTitreSévéritéPubliéeEPSSExploitation
CVE-2018-0808ASP.NET Core 1.0. 1.1, and 2.0ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how ASP.NET web applications handle web requests, aka "AHIGH 7.57.8 %
CVE-2018-0787ASP.NET Core 1.0. 1.1, and 2.0ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how web applications that are created from templates valHIGH 8.89.6 %
CVE-2018-0785ASP.NET Core 1.0. 1.1, and 2.0ASP.NET Core 1.0. 1.1, and 2.0 allow a cross site request forgery vulnerability due to the ASP.NET Core project templates, aka "ASP.NET CoreMEDIUM 6.53.0 %
CVE-2018-0784ASP.NET Core 1.0. 1.1, and 2.0ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to the ASP.NET Core project templates, aka "ASP.NET Core ElHIGH 8.86.5 %
CVE-2017-8700ASP.NET Core 1.0, 1.1, and 2.0ASP.NET Core 1.0, 1.1, and 2.0 allow an attacker to bypass Cross-origin Resource Sharing (CORS) configurations and retrieve normally restricHIGH 7.510 %
CVE-2017-11879ASP.NET Core 2.0ASP.NET Core 2.0 allows an attacker to steal log-in session information such as cookies or authentication tokens via a specially crafted URLHIGH 8.89.4 %
CVE-2017-0256ASP.NET CoreA spoofing vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.MEDIUM 5.33.5 %
CVE-2017-0249ASP.NET CoreAn elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.HIGH 7.34.2 %
CVE-2017-0247ASP.NET CoreA denial of service vulnerability exists when the ASP.NET Core fails to properly validate web requests. NOTE: Microsoft has not commented onHIGH 7.517 %