microsoft microsoft-aspnetcore-mvc-abstractions CVE-2017-0249 vulnerability in Microsoft Products
Published on May 12, 2017

An elevation of privilege vulnerability exists when the ASP.NET Core fails to properly sanitize web requests.

NVD


Products Associated with CVE-2017-0249

Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.

Microsoft Aspnetcore Mvc Abstractions
 
Microsoft Aspnetcore Mvc Apiexplorer
 
Microsoft Aspnetcore Mvc Cors
 
Microsoft Aspnetcore Mvc Formatters Json
 
Microsoft Aspnetcore Mvc Taghelpers
 
Microsoft Aspnetcore Mvc Razor
 
Microsoft Aspnetcore Mvc Dataannotations
 
Microsoft Aspnetcore Mvc Webapicompatshim
 
Microsoft Aspnetcore Mvc Localization
 
Microsoft System Net Http
 
Microsoft Asp Net Model View Controller
 
Microsoft Aspnetcore Mvc Formatters Xml
 
Microsoft System Text Encodings Web
 
Microsoft Aspnetcore Mvc Razor Host
 
Microsoft Aspnetcore Mvc Viewfeatures
 
Microsoft System Net Websockets Client
 
Microsoft System Net Security
 
Microsoft System Net Http Winhttphandler
 

Affected Versions

Microsoft Corporation ASP.NET Core Version ASP.NET Core is affected by CVE-2017-0249

Exploit Probability

EPSS
5.79%
Percentile
90.38%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.