{"id":"CVE-2017-9822","vendor_project":"DotNetNuke (DNN)","product":"DotNetNuke (DNN)","vulnerability_name":"DotNetNuke (DNN) Remote Code Execution Vulnerability","date_added":"2021-11-03","due_date":"2022-05-03","known_ransomware_use":"Known","short_description":"DotNetNuke (DNN) contains a vulnerability that may allow for remote code execution via cookie deserialization.","required_action":"Apply updates per vendor instructions.","cwes":"CWE-20","cvss_version":"3.1","cvss_severity":"HIGH","cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","nvd_published":"2017-07-20","nvd_status":"Analyzed","epss":0.94789,"epss_percentile":0.99856,"cvss_score":8.8,"days_published_to_kev":1567,"source":"https://data.cybermax-tools.workers.dev/cve/CVE-2017-9822","by":"CyberMax"}