Vendor

    Dnnsoftware

    76 known vulnerabilities in products by Dnnsoftware, 3 of them actively exploited (CISA KEV).

    Key figures

    76

    Vulnerabilities

    3

    Actively exploited (KEV)

    1

    Used by ransomware

    7

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Dnnsoftware
    CriticalCVE-2017-9822

    DotNetNuke (DNN) Remote Code Execution Vulnerability

    In CISA KEVRansomware

    		8.8
    CriticalCVE-2018-15811

    DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability

    In CISA KEV

    		7.5
    CriticalCVE-2018-18325

    DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability

    In CISA KEV

    		7.5
    CriticalCVE-2025-64095

    DNN Insufficient Access Control - Image Upload allows for Site Content Overwrite

    		10.0
    HighCVE-2025-52488

    DNN.PLATFORM leaks NTLM hash via SMB Share Interaction with malicious user input

    		8.6
    CriticalCVE-2015-2794

    Dnn.Platform: security vulnerability

    		9.8
    HighCVE-2026-40321

    DotNetNuke.Core has stored cross-site-scripting (XSS) via SVG upload

    		8.0
    HighCVE-2018-18326

    Dnn.Platform: security vulnerability

    		7.5
    HighCVE-2018-15812

    Dnn.Platform: security vulnerability

    		7.5
    HighCVE-2017-0929

    Dnn.Platform: Server-Side Request Forgery (SSRF)

    		7.5
    HighCVE-2020-5187

    Dnn.Platform: Path Traversal

    		8.8
    MediumCVE-2019-12562

    Dnn.Platform: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2020-5188

    Dnn.Platform: security vulnerability

    		6.5
    CriticalCVE-2025-59545

    DNN Vulnerable to Stored Cross-Site Scripting (XSS) in the Prompt module

    		9.1
    HighCVE-2021-40186

    DNN CMS Server-Side Request Forgery (SSRF)

    		6.5
    MediumCVE-2018-14486

    Dnn.Platform: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2022-2922

    Relative Path Traversal in dnnsoftware/dnn.platform

    		4.9
    CriticalCVE-2026-24838

    DotNetNuke.Core Vulnerable to Stored XSS via Module Title

    		9.1
    HighCVE-2025-52487

    DNN.PLATFORM possibly allows bypass of IP Filters

    		7.5
    Not ratedCVE-2008-6540

    Dnn.Platform: security vulnerability

    		—
    Not ratedCVE-2013-4649

    Dnn.Platform: Cross-Site Scripting (XSS)

    		—
    Not ratedCVE-2006-3601

    Dnn.Platform: Privilege Escalation

    		—
    HighCVE-2026-24837

    DotNetNuke.Core Vulnerable to Stored XSS in Module Deletion Confirmation Modal

    		7.7
    MediumCVE-2020-5186

    Dnn.Platform: Cross-Site Scripting (XSS)

    		5.4
    HighCVE-2026-24836

    DotNetNuke.Core Vulnerable to Stored XSS in Scheduler LogNotes

    		7.7

    All vulnerabilities in search

    Products

    Products by Dnnsoftware
    Dnn.Platform763
    Dnn.Platform320