DN
Product
Dnn.Platform
31
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 6Medium 22Low 1
Watch
Add Dnn.Platform to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-52488 | 8.6 | Jun 21 | DNN.PLATFORM leaks NTLM hash via SMB Share Interaction with malicious user input Affected: >= 6.0.0, < 10.0.1 |
| CVE-2026-40321 | 8.0 | Apr 17 | DotNetNuke.Core has stored cross-site-scripting (XSS) via SVG upload Affected: < 10.2.2 |
| CVE-2025-52487 | 7.5 | Jun 21 | DNN.PLATFORM possibly allows bypass of IP Filters Affected: >= 7.0.0, < 10.0.1 |
| CVE-2025-32374 | 7.5 | Apr 9 | Possible Denial of Service (DoS) in DNN.PLATFORM registration Affected: < 9.13.8 |
| CVE-2025-32372 | 7.5 | Apr 9 | Server-Side Request Forgery (SSRF) in DotNetNuke.Core Affected: < 9.13.8 |
| CVE-2025-32035 | 7.5 | Apr 8 | DNN does not check the contents of a file when uploading files Affected: < 9.13.2 |
Showing 6
