GCVE - cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Asp.Net (`11ed948f-4cd5-59de-810d-d6b901679210`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-8171`	vulnerable	2026-06-08 05:12:05.363054	Details available A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET Security Feature Bypass Vulnerability." This affects ASP.NET, ASP.NET Core 1.1, ASP.NET Core 1.0, ASP.NET Core 2.0, ASP.NET MVC 5.2. Published: 2018-07-11T00:00:00.000Z Updated: 2024-08-05T06:46:13.464Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1041267 http://www.securityfocus.com/bid/104659 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8171	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1364`	vulnerable	2026-06-08 04:48:57.023458	Details available Microsoft w3wp (aka w3wp.exe) does not properly handle when the AspCompat directive is not used when referencing COM components in ASP.NET, which allows remote attackers to cause a denial of service (resource consumption or crash) by repeatedly requesting each of several documents that refer to COM components, or are restricted documents located under the ASP.NET application path. Published: 2006-03-23T11:00:00.000Z Updated: 2024-08-07T17:12:20.929Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/428622/100/0/threaded http://hackingspirits.com/vuln-rnd/w3wp-remote-dos.zip http://securitytracker.com/id?1015825 http://www.securityfocus.com/bid/17188 https://exchange.xforce.ibmcloud.com/vulnerabilities/25392	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0847`	vulnerable	2026-06-08 04:47:51.626679	Details available The Microsoft .NET forms authentication capability for ASP.NET allows remote attackers to bypass authentication for .aspx files in restricted directories via a request containing a (1) "\" (backslash) or (2) "%5C" (encoded backslash), aka "Path Validation Vulnerability." Published: 2004-10-06T04:00:00.000Z Updated: 2024-08-08T00:31:47.674Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-004 http://sourceforge.net/mailarchive/forum.php?thread_id=5671607&forum_id=24754 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4987 http://www.us-cert.gov/cas/techalerts/TA05-039A.html https://exchange.xforce.ibmcloud.com/vulnerabilities/17644	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.