CVE-2017-9822
High · 8.8 CISA KEV · ransomwareCVSS
8.8
EPSS
94.8%
Published
Jul 20, 2017
CISA due date
May 3, 2022
The record
DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code execution on DNN sites."
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| NuGet | DotNetNuke.Core | 0 | 9.1.1 |
Related vulnerabilities
- GHSA-w9pf-h6m6-v89h DotNetNuke.Core Vulnerable to Stored XSS via Module Title Also affects DotNetNuke.Core
- GHSA-vm5q-8qww-h238 DotNetNuke.Core Vulnerable to Stored XSS in Module Deletion Confirmation Modal Also affects DotNetNuke.Core
- GHSA-2g5g-hcgh-q3rp DotNetNuke.Core Vulnerable to Stored XSS in Scheduler LogNotes Also affects DotNetNuke.Core
- GHSA-jjwg-4948-6wxp DotNetNuke.Core has a potential XSS vulnerability in modules' header and footer Also affects DotNetNuke.Core
- CVE-2026-24838 DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the… Also affects DotNetNuke.Core
- CVE-2026-24837 DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the… Also affects DotNetNuke.Core
- CVE-2026-24784 DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the… Also affects DotNetNuke.Core
- CVE-2026-24836 DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the… Also affects DotNetNuke.Core