DNN Software vendor intelligence
DNN Software Known Exploited Vulnerabilities
Track evidence-backed exploitation affecting DNN Software products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.
- Total KEVs
- 3
- Known exploited vulnerabilities affecting DNN Software products
- In CISA KEV
- 1
- Records also listed in the official catalog
- Beyond CISA KEV
- 2
- Additional exploited vulnerabilities absent from CISA KEV
- Sensor Observed
- 1
- DNN Software KEV with sensor-observed exploitation activity
The catalog gap matters for DNN Software exposure
Two of the three exploited DNN Software vulnerabilities tracked by Previdian are not in CISA KEV. Teams relying on the official catalog alone would miss two-thirds of this vendor portfolio.
- 33%
- Covered by CISA
- 67%
- Beyond CISA
- 2
- Product families
Attested DNN Software vulnerabilities
3 known exploited vulnerabilities in this exploited-vulnerability portfolio. Search, then narrow it to official CISA coverage or the additional records Previdian tracks beyond the catalog.
How exploitation is verified| CVE / description | Product | Confidence | CISA KEV | Added |
|---|---|---|---|---|
|
CVE-2025-52488
DNN.PLATFORM leaks NTLM hash via SMB Share Interaction with malicious user input |
Dnn.Platform | High | Beyond CISA | 12 Sep 2025 |
|
CVE-2025-64095
DNN Insufficient Access Control - Image Upload allows for Site Content Overwrite |
Dnn.Platform | Confirmed | Beyond CISA | 28 Oct 2025 |
|
CVE-2018-18325
DNN (aka DotNetNuke) 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue exists because of an... |
DNN Platform | Confirmed | In CISA | 03 Nov 2021 |
No DNN Software vulnerabilities match this search or filter.
Showing 3 of 3 on this page (3 DNN Software known exploited vulnerabilities).
Recurring weakness patterns
Exposure, inadequate encryption strength, and unrestricted upload account for three mapped occurrences across this DNN Software KEV portfolio.