Login Request a demo
DN
Vendor
Dnnsoftware
3 products with CVEs on record
80
CVEs
3
On KEV
0
New 30D
Products
DO
Dotnetnuke
Dnnsoftware
9.8
76 CVEs3 on KEV0 new
DN
Dnn.Platform
dnnsoftware
8.0
3 CVEs0 on KEV0 new
DN
dnnsoftware/dnn.platform
dnnsoftware
4.9
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-40321
DN
Dnn.Platform
dnnsoftware
8.0
6%
Apr 17DotNetNuke.Core has stored cross-site-scripting (XSS) via SVG upload
CVE-2026-40306
DN
Dnn.Platform
dnnsoftware
6.5
0%
Apr 17DNN has same HostGUID for all new installs
CVE-2026-40305
DN
Dnn.Platform
dnnsoftware
4.3
0%
Apr 17DNN has Force Friend Request Acceptance
CVE-2020-37103
DO
Dotnetnuke
Dnnsoftware
5.4
0%
Feb 3DotNetNuke 9.5 contains a persistent cross-site scripting vulnerability that allows normal users to upload malicious XML files with executable scripts through journal tools
CVE-2026-24838
DO
Dotnetnuke
Dnnsoftware
5.4
0%
Jan 28DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem
CVE-2026-24837
DO
Dotnetnuke
Dnnsoftware
5.4
0%
Jan 28DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem
CVE-2026-24836
DO
Dotnetnuke
Dnnsoftware
5.4
0%
Jan 28DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem
CVE-2026-24833
DO
Dotnetnuke
Dnnsoftware
5.4
0%
Jan 28DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem
CVE-2026-24784
DO
Dotnetnuke
Dnnsoftware
4.8
0%
Jan 28DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem
CVE-2025-64095
DO
Dotnetnuke
Dnnsoftware
9.8
47%
Oct 28DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem
CVE-2025-64094
DO
Dotnetnuke
Dnnsoftware
5.4
0%
Oct 28DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem
CVE-2025-62802
DO
Dotnetnuke
Dnnsoftware
4.3
0%
Oct 28DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem
CVE-2025-59821
DO
Dotnetnuke
Dnnsoftware
6.1
0%
Sep 23DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem
CVE-2025-59548
DO
Dotnetnuke
Dnnsoftware
6.1
0%
Sep 23DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem
CVE-2025-59547
DO
Dotnetnuke
Dnnsoftware
5.3
0%
Sep 23DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem
CVE-2025-59546
DO
Dotnetnuke
Dnnsoftware
4.8
0%
Sep 23DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem
CVE-2025-59545
DO
Dotnetnuke
Dnnsoftware
9.0
0%
Sep 23DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem
CVE-2025-59539
DO
Dotnetnuke
Dnnsoftware
5.4
0%
Sep 23DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem
CVE-2025-59535
DO
Dotnetnuke
Dnnsoftware
6.5
0%
Sep 22DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem
CVE-2025-52488
DO
Dotnetnuke
Dnnsoftware
8.6
36%
Jun 21DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem
CVE-2025-52487
DO
Dotnetnuke
Dnnsoftware
7.5
0%
Jun 21DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem
CVE-2025-52486
DO
Dotnetnuke
Dnnsoftware
6.1
0%
Jun 21DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem
CVE-2025-52485
DO
Dotnetnuke
Dnnsoftware
5.4
0%
Jun 21DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem
CVE-2025-48378
DO
Dotnetnuke
Dnnsoftware
5.4
0%
May 23DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem
CVE-2025-48377
DO
Dotnetnuke
Dnnsoftware
5.4
0%
May 23DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem
CVE-2025-48376
DO
Dotnetnuke
Dnnsoftware
2.4
0%
May 23DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem
CVE-2025-32374
DO
Dotnetnuke
Dnnsoftware
7.5
0%
Apr 9DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem
CVE-2025-32373
DO
Dotnetnuke
Dnnsoftware
6.5
0%
Apr 9DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem
CVE-2025-32372
DO
Dotnetnuke
Dnnsoftware
7.5
0%
Apr 9DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem
CVE-2025-32371
DO
Dotnetnuke
Dnnsoftware
4.3
0%
Apr 9DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem
CVE-2025-32036
DO
Dotnetnuke
Dnnsoftware
6.5
0%
Apr 8DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem
CVE-2025-32035
DO
Dotnetnuke
Dnnsoftware
7.5
0%
Apr 8DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem
CVE-2022-47053
DO
Dotnetnuke
Dnnsoftware
5.4
0%
Apr 12An arbitrary file upload vulnerability in the Digital Assets Manager module of DNN Corp DotNetNuke v7.0.0 to v9.10.2 allows attackers to execute arbitrary code via a crafted SVG…
CVE-2022-2922
DN
dnnsoftware/dnn.platform
dnnsoftware
4.9
1%
Sep 30Relative Path Traversal in dnnsoftware/dnn.platform
CVE-2021-31858
DO
Dotnetnuke
Dnnsoftware
5.4
1%
Jul 20DotNetNuke (DNN) 9.9.1 CMS is vulnerable to a Stored Cross-Site Scripting vulnerability in the user profile biography section which allows remote authenticated users to inject…
CVE-2021-40186
DO
Dotnetnuke
Dnnsoftware
7.5
1%
Jun 2The AppCheck research team identified a Server-Side Request Forgery (SSRF) vulnerability within the DNN CMS platform, formerly known as DotNetNuke
CVE-2020-11585
DO
Dotnetnuke
Dnnsoftware
4.3
1%
Apr 6There is an information disclosure issue in DNN (formerly DotNetNuke) 9.5 within the built-in Activity-Feed/Messaging/Userid/ Message Center module
CVE-2020-5188
DO
Dotnetnuke
Dnnsoftware
6.5
2%
Feb 24DNN (formerly DotNetNuke) through 9.4.4 has Insecure Permissions
CVE-2020-5187
DO
Dotnetnuke
Dnnsoftware
8.8
2%
Feb 24DNN (formerly DotNetNuke) through 9.4.4 allows Path Traversal (issue 2 of 2)
CVE-2020-5186
DO
Dotnetnuke
Dnnsoftware
5.4
1%
Feb 24DNN (formerly DotNetNuke) through 9.4.4 allows XSS (issue 1 of 2)
CVE-2019-12562
DO
Dotnetnuke
Dnnsoftware
6.1
6%
Sep 26Stored Cross-Site Scripting in DotNetNuke (DNN) Version before 9.4.0 allows remote attackers to store and embed the malicious script into the admin notification page
CVE-2018-18326
DO
Dotnetnuke
Dnnsoftware
7.5
54%
Jul 3DNN (aka DotNetNuke) 9.2 through 9.2.2 incorrectly converts encryption key source values, resulting in lower than expected entropy
CVE-2018-15812
DO
Dotnetnuke
Dnnsoftware
7.5
47%
Jul 3DNN (aka DotNetNuke) 9.2 through 9.2.1 incorrectly converts encryption key source values, resulting in lower than expected entropy
CVE-2018-18325
In wildKEV
DO
Dotnetnuke
Dnnsoftware
7.5
74%
Jul 3DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability
CVE-2018-15811
In wildKEV
DO
Dotnetnuke
Dnnsoftware
7.5
76%
Jul 3DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters
CVE-2018-14486
DO
Dotnetnuke
Dnnsoftware
6.1
1%
Mar 17DNN (formerly DotNetNuke) 9.1.1 allows cross-site scripting (XSS) via XML
CVE-2017-0929
DO
Dotnetnuke
Dnnsoftware
7.5
13%
Jul 3DNN (aka DotNetNuke) before 9.2.0 suffers from a Server-Side Request Forgery (SSRF) vulnerability in the DnnImageHandler class
CVE-2017-9822
RansomwareIn wildKEV
DO
Dotnetnuke
Dnnsoftware
8.8
95%
Jul 20DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code execution on DNN sites."
CVE-2015-2794
DO
Dotnetnuke
Dnnsoftware
9.8
75%
Feb 6The installation wizard in DotNetNuke (DNN) before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via a direct request to…
CVE-2016-7119
DO
Dotnetnuke
Dnnsoftware
5.4
1%
Aug 31Cross-site scripting (XSS) vulnerability in the user-profile biography section in DotNetNuke (DNN) before 8.0.1 allows remote authenticated users to inject arbitrary web script or…
CVE-2015-1566
DO
Dotnetnuke
Dnnsoftware
–
2%
Feb 9Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 7.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors
CVE-2013-7335
DO
Dotnetnuke
Dnnsoftware
–
1%
Mar 12Open redirect vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via…
CVE-2013-4649
DO
Dotnetnuke
Dnnsoftware
–
2%
Mar 12Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote attackers to inject arbitrary web script or HTML via the __dnnVariable…
CVE-2013-3943
DO
Dotnetnuke
Dnnsoftware
–
1%
Mar 12Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 6.2.9 and 7.x before 7.1.1 allows remote authenticated users to inject arbitrary web script or HTML via vectors…
CVE-2012-1036
DO
Dotnetnuke
Dnnsoftware
–
1%
Apr 11Cross-site scripting (XSS) vulnerability in the telerik HTML editor in DotNetNuke before 5.6.4 and 6.x before 6.1.0 allows remote attackers to inject arbitrary web script or HTML…
CVE-2012-1030
DO
Dotnetnuke
Dnnsoftware
–
1%
Apr 11Cross-site scripting (XSS) vulnerability in DotNetNuke 6.x through 6.0.2 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted URL containing…
CVE-2010-4514
DO
Dotnetnuke
Dnnsoftware
–
1%
Dec 9Cross-site scripting (XSS) vulnerability in Install/InstallWizard.aspx in DotNetNuke 5.05.01 and 5.06.00 allows remote attackers to inject arbitrary web script or HTML via the…
CVE-2009-4110
DO
Dotnetnuke
Dnnsoftware
–
2%
Nov 29Cross-site scripting (XSS) vulnerability in the search functionality in DotNetNuke 4.8 through 5.1.4 allows remote attackers to inject arbitrary web script or HTML via search…
CVE-2009-4109
DO
Dotnetnuke
Dnnsoftware
–
1%
Nov 29The install wizard in DotNetNuke 4.0 through 5.1.4 does not prevent anonymous users from accessing functionality related to determination of the need for an upgrade, which allows…
CVE-2008-7102
DO
Dotnetnuke
Dnnsoftware
–
1%
Aug 27DotNetNuke 2.0 through 4.8.4 allows remote attackers to load .ascx files instead of skin files, and possibly access privileged functionality, via unknown vectors related to…