Microsoft Aspnetcore vulnerabilities

2 CVEs affecting Microsoft Aspnetcore, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-11883, published 2017-11-15.

More from Microsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-11883, published 2017-11-15. High severity, CVSS 7.5. EPSS: 8.5% chance of exploitation in the next 30 days. .NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly handling web requests, aka ".NET CORE…
• CVE-2017-11770, published 2017-11-15. High severity, CVSS 7.5. EPSS: 5.4% chance of exploitation in the next 30 days. .NET Core 1.0, 1.1, and 2.0 allow an unauthenticated attacker to remotely cause a denial of service attack against a .NET Core web application by improperly parsing certificate data. A denial of…