CVE Catalog
Actively exploited in the wild
DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability
DotNetNuke (DNN) - DotNetNuke (DNN) · Listed in the CISA KEV since 2021-11-03. This indicates confirmed attacks in production environments.
Required action: Apply updates per vendor instructions.
CVE-2018-15811
HighCVSS 7.5KEVSummary
DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters.
Risk Assessment
Weak encryption of parameters could allow an attacker to decrypt or manipulate data, potentially leading to unauthorized access or attacks.
Recommendation
Update DNN to a patched version.
Other vulnerabilities in DNN (DotNetNuke)
Original NVD description (English source)
DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters.