CVE-2018-15811

CVE Published 2019-07-03
Related CWE(s) CWE-326: Inadequate Encryption Strength
Related Vendor(s) dnnsoftware
Related Product(s) dotnetnuke
Exploitation Reported (CISA KEV) 2021-11-03
CVSS 3 Base Score 7.5 (HIGH)
CVSS 3 Attack Complexity LOW
CVSS 3 Attack Vector NETWORK

DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters.

Cyber Threat Graph Context

Explore how this CVE relates to the wider threat graph

Associated CAPEC Patterns

References