# Dnnsoftware Dotnetnuke


- [CVE-2017-9822](https://insights.sbomify.com/CVE-2017-9822/): DotNetNuke (DNN) Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2018-15811](https://insights.sbomify.com/CVE-2018-15811/): DotNetNuke (DNN) Inadequate Encryption Strength (high 7.5, exploited in the wild)
- [CVE-2018-18325](https://insights.sbomify.com/CVE-2018-18325/): DotNetNuke (DNN) Inadequate Encryption Strength (high 7.5, exploited in the wild)
- [CVE-2025-64095](https://insights.sbomify.com/CVE-2025-64095/): DNN Insufficient Access Control - Image Upload allows for Site Content Overwrite (critical 10.0)
- [CVE-2006-3601](https://insights.sbomify.com/CVE-2006-3601/): Privilege escalation in n/a (critical 10.0)
- [CVE-2015-2794](https://insights.sbomify.com/CVE-2015-2794/): The installation wizard in DotNetNuke (DNN) allows privilege escalation (critical 9.8)
- [CVE-2026-24838](https://insights.sbomify.com/CVE-2026-24838/): DotNetNuke.Core Vulnerable to Stored XSS via Module Title (critical 9.1)
- [CVE-2025-59545](https://insights.sbomify.com/CVE-2025-59545/): DNN Vulnerable to Stored Cross-Site Scripting (XSS) in the Prompt module (critical 9.1)
- [CVE-2025-52487](https://insights.sbomify.com/CVE-2025-52487/): DNN.PLATFORM possibly allows bypass of IP Filters (high 8.8)
- [CVE-2020-5187](https://insights.sbomify.com/CVE-2020-5187/): DNN Path Traversal via Zip Slip (high 8.8)
- [CVE-2025-52488](https://insights.sbomify.com/CVE-2025-52488/): DNN.PLATFORM leaks NTLM hash via SMB Share Interaction with malicious user input (high 8.6)
- [CVE-2026-40321](https://insights.sbomify.com/CVE-2026-40321/): DotNetNuke.Core has stored cross-site-scripting (XSS) via SVG upload (high 8.1)

---
From sbomify Insights: https://insights.sbomify.com/products/dnnsoftware/dotnetnuke/