H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeVulnerability
External ID—
First seen2021-11-03
Last seen2021-11-03

Confidence

—

DotNetNuke (DNN) contains an inadequate encryption strength vulnerability resulting from the use of a weak encryption algorithm to protect input parameters. This CVE ID resolves an incomplete patch for CVE-2018-15811.

Labels

exploitedkev

CISA KEV context

Vendor / productDotNetNuke (DNN) DotNetNuke (DNN)
Added2021-11-03
Due date2022-05-03
4 recorded

Relationships

mitigatesMitigation
related-toTechnique
related-toTechnique
related-toTechnique
2 external

References

nvd
CVE-2018-18325
open
cwe
CWE-326
open