{"schema_version":"1","data":[{"id":3545,"advisory_id":"3498a4a0-f947-46da-9f06-8b9e5f8bb0ff","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2017-9822","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:37:23.215822+00:00","extraction_method":"structured","technologies":["core-kev","dotnetnuke-dnn"],"cve_ids":["CVE-2017-9822"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"DotNetNuke (DNN) Remote Code Execution Vulnerability","summary":"DotNetNuke (DNN) contains a vulnerability that may allow for remote code execution via cookie deserialization. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2017-9822","products":[{"name":{"value":"DotNetNuke (DNN)","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2017-9822","aliases":["CVE-2017-9822"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-20"],"cveID":"CVE-2017-9822","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-9822","dueDate":"2022-05-03","product":"DotNetNuke (DNN)","dateAdded":"2021-11-03","vendorProject":"DotNetNuke (DNN)","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"DotNetNuke (DNN) contains a vulnerability that may allow for remote code execution via cookie deserialization.","vulnerabilityName":"DotNetNuke (DNN) Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2017-9822","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3543,"advisory_id":"38a20016-63b1-4674-ae20-51b72d1bc817","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-18325","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:37:21.661189+00:00","extraction_method":"structured","technologies":["core-kev","dotnetnuke-dnn"],"cve_ids":["CVE-2018-18325"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability","summary":"DotNetNuke (DNN) contains an inadequate encryption strength vulnerability resulting from the use of a weak encryption algorithm to protect input parameters. This CVE ID resolves an incomplete patch for CVE-2018-15811. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2018-18325","products":[{"name":{"value":"DotNetNuke (DNN)","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-18325","aliases":["CVE-2018-18325"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-326"],"cveID":"CVE-2018-18325","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-18325","dueDate":"2022-05-03","product":"DotNetNuke (DNN)","dateAdded":"2021-11-03","vendorProject":"DotNetNuke (DNN)","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"DotNetNuke (DNN) contains an inadequate encryption strength vulnerability resulting from the use of a weak encryption algorithm to protect input parameters. This CVE ID resolves an incomplete patch for CVE-2018-15811.","vulnerabilityName":"DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2018-18325","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3542,"advisory_id":"4128072f-cd93-4e0c-9f47-78417432b496","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-15811","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:37:20.655624+00:00","extraction_method":"structured","technologies":["core-kev","dotnetnuke-dnn"],"cve_ids":["CVE-2018-15811"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability","summary":"DotNetNuke (DNN) contains an inadequate encryption strength vulnerability resulting from the use of a weak encryption algorithm to protect input parameters. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2018-15811","products":[{"name":{"value":"DotNetNuke (DNN)","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-15811","aliases":["CVE-2018-15811"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-326"],"cveID":"CVE-2018-15811","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-15811","dueDate":"2022-05-03","product":"DotNetNuke (DNN)","dateAdded":"2021-11-03","vendorProject":"DotNetNuke (DNN)","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"DotNetNuke (DNN) contains an inadequate encryption strength vulnerability resulting from the use of a weak encryption algorithm to protect input parameters.","vulnerabilityName":"DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2018-15811","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}}],"next_after":3545,"next_before":3542}