Microsoft ASP.NET Core 2.1

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:asp.net_core:2.1:*:*:*:*:*:*:*

part: a version: 2.1 update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductAsp.Net Core (bb6bee6e-6b53-54e5-b686-7064a986b51d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-38180 vulnerable 2026-06-08 06:08:17.167032 .NET and Visual Studio Denial of Service Vulnerability
HIGH (7.5)
.NET and Visual Studio Denial of Service Vulnerability
Published: 2023-08-08T18:52:31.790Z
Updated: 2025-10-21T23:05:41.434Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1597 vulnerable 2026-06-08 05:21:01.093610 ASP.NET Core Denial of Service Vulnerability
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against an ASP.NET Core web application. The vulnerability can be exploited remotely, without authentication. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the ASP.NET Core application. The update addresses the vulnerability by correcting how the ASP.NET Core web application handles web requests.
Published: 2020-08-17T19:13:53.000Z
Updated: 2024-08-04T06:39:10.725Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-0603 vulnerable 2026-06-08 05:16:32.359714 Details available
A remote code execution vulnerability exists in ASP.NET Core software when the software fails to handle objects in memory.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user, aka 'ASP.NET Core Remote Code Execution Vulnerability'.
Published: 2020-01-14T23:11:21.000Z
Updated: 2024-08-04T06:11:04.603Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-0602 vulnerable 2026-06-08 05:16:32.356075 Details available
A denial of service vulnerability exists when ASP.NET Core improperly handles web requests, aka 'ASP.NET Core Denial of Service Vulnerability'.
Published: 2020-01-14T23:11:20.000Z
Updated: 2024-08-04T06:11:04.661Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-1302 vulnerable 2026-06-08 05:13:25.572374 Details available
An elevation of privilege vulnerability exists when a ASP.NET Core web application, created using vulnerable project templates, fails to properly sanitize web requests, aka 'ASP.NET Core Elevation Of Privilege Vulnerability'.
Published: 2019-09-11T21:25:01.000Z
Updated: 2024-08-04T18:13:30.222Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-1075 vulnerable 2026-06-08 05:13:24.711436 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0982 vulnerable 2026-06-08 05:12:21.269629 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0564 vulnerable 2026-06-08 05:12:20.011298 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0548 vulnerable 2026-06-08 05:12:19.966622 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8416 vulnerable 2026-06-08 05:12:05.866624 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8292 vulnerable 2026-06-08 05:12:05.587998 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.