Microsoft Asp.net Model View Controller — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Asp.net Model View Controller, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2017-0247 — CVSS 7.5 (high): A denial of service vulnerability exists when the ASP.NET Core fails to properly validate web requests. NOTE: Microsoft has not commented…
• CVE-2018-8171 — CVSS 7.5 (high): A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET…
• CVE-2017-0249 — CVSS 7.3 (high): An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.
• CVE-2017-0256 — CVSS 5.3 (medium): A spoofing vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.
• CVE-2014-4075 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in System.Web.Mvc.dll in Microsoft ASP.NET Model View Controller (MVC) 2.0 through 5.1 allows…