GCVE - cpe:2.3:a:microsoft:asp.net_core:2.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:asp.net_core:2.0:*:*:*:*:*:*:*

part: a version: 2.0 update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Asp.Net Core (`bb6bee6e-6b53-54e5-b686-7064a986b51d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-8356`	vulnerable	2026-06-08 05:12:05.725244	Details available A security feature bypass vulnerability exists when Microsoft .NET Framework components do not correctly validate certificates, aka ".NET Framework Security Feature Bypass Vulnerability." This affects .NET Framework 4.7.2, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2, ASP.NET Core 1.1, Microsoft .NET Framework 4.5.2, ASP.NET Core 2.0, ASP.NET Core 1.0, .NET Core 1.1, Microsoft .NET Framework 3.5, Microsoft .NET Framework 3.5.1, Microsoft .NET Framework 4.6/4.6.1/4.6.2, .NET Core 1.0, .NET Core 2.0, Microsoft .NET Framework 4.6, Microsoft .NET Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.1/4.7.2, Microsoft .NET Framework 4.7.2. Published: 2018-07-11T00:00:00.000Z Updated: 2024-08-05T06:54:36.082Z Open on db.gcve.eu Reference links https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8356 http://www.securityfocus.com/bid/104664 http://www.securitytracker.com/id/1041257	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-8171`	vulnerable	2026-06-08 05:12:05.366807	Details available A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Security Feature Bypass Vulnerability." This affects ASP.NET, ASP.NET Core 1.1, ASP.NET Core 1.0, ASP.NET Core 2.0, ASP.NET MVC 5.2. Published: 2018-07-11T00:00:00.000Z Updated: 2024-08-05T06:46:13.464Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1041267 http://www.securityfocus.com/bid/104659 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8171	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-0875`	vulnerable	2026-06-08 05:10:24.983664	Details available .NET Core 1.0, .NET Core 1.1, NET Core 2.0 and PowerShell Core 6.0.0 allow a denial of Service vulnerability due to how specially crafted requests are handled, aka ".NET Core Denial of Service Vulnerability". Published: 2018-03-14T17:00:00.000Z Updated: 2024-09-16T17:33:24.246Z Open on db.gcve.eu Reference links https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0875 http://www.securityfocus.com/bid/103225 http://www.securitytracker.com/id/1040505 https://access.redhat.com/errata/RHSA-2018:0522	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-0808`	vulnerable	2026-06-08 05:10:24.831889	Details available ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how ASP.NET web applications handle web requests, aka "ASP.NET Core Elevation Of Privilege Vulnerability". This CVE is unique from CVE-2018-0784. Published: 2018-03-14T17:00:00.000Z Updated: 2024-09-17T02:53:29.089Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/103226 http://www.securitytracker.com/id/1040504 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0808	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-0787`	vulnerable	2026-06-08 05:10:24.762578	Details available ASP.NET Core 1.0. 1.1, and 2.0 allow an elevation of privilege vulnerability due to how web applications that are created from templates validate web requests, aka "ASP.NET Core Elevation Of Privilege Vulnerability". Published: 2018-03-14T17:00:00.000Z Updated: 2024-09-16T17:23:49.994Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1040525 https://github.com/aspnet/Announcements/issues/295 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0787 http://www.securityfocus.com/bid/103282	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-0785`	vulnerable	2026-06-08 05:10:24.754781	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-0784`	vulnerable	2026-06-08 05:10:24.754350	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-8700`	vulnerable	2026-06-08 05:10:08.764145	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-11879`	vulnerable	2026-06-08 05:08:38.602738	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.