Microsoft Corporation ASP.NET Core vulnerabilities

CVEs per yearBy the year they were published

1. 20175
2. 20184

Newest CVEs

• CVE-2018-0808

  ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how ASP.NET web applications handle web requests, aka "ASP.NET Core…

  Microsoft Corporation · ASP.NET Core

  High7.5
• CVE-2018-0787

  ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how web applications that are created from templates validate web requests,…

  Microsoft Corporation · ASP.NET Core

  High8.8
• CVE-2018-0785

  ASP.NET Core 1.0. 1.1, and 2.0 allow a cross site request forgery vulnerability due to the ASP.NET Core project templates, aka "ASP.NET Core Cross Site Request…

  Microsoft Corporation · ASP.NET Core

  Medium6.5
• CVE-2018-0784

  ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to the ASP.NET Core project templates, aka "ASP.NET Core Elevation Of…

  Microsoft Corporation · ASP.NET Core

  High8.8
• CVE-2017-11879

  ASP.NET Core 2.0 allows an attacker to steal log-in session information such as cookies or authentication tokens via a specially crafted URL aka "ASP.NET Core…

  Microsoft Corporation · ASP.NET Core

  High8.8
• CVE-2017-8700

  ASP.NET Core 1.0, 1.1, and 2.0 allow an attacker to bypass Cross-origin Resource Sharing (CORS) configurations and retrieve normally restricted content from a…

  Microsoft Corporation · ASP.NET Core

  High7.5
• CVE-2017-0256

  A spoofing vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.

  Microsoft Corporation · ASP.NET Core

  Medium5.3
• CVE-2017-0249

  An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.

  Microsoft Corporation · ASP.NET Core

  High7.3
• CVE-2017-0247

  A denial of service vulnerability exists when the ASP.NET Core fails to properly validate web requests. NOTE: Microsoft has not commented on third-party claims…

  Microsoft Corporation · ASP.NET Core

  High7.5