CVE-2017-9822

Severity

HIGH

CVSS

8.8

EPSS

0.94789

Risk score

58.18

CISA KEV

Yes

PoC

Published

2017-07-20

Modified

2025-10-21

First seen

2026-08-07

Aliases

EUVD-2018-0710, GHSA-X2RG-FMCV-CRQ5

Products

DotNetNuke (DNN):DotNetNuke (DNN), DotNetNuke:DotNetNuke CMS Fixed in 9.1.1 DotNetNuke CMS Fixed in 9.1.1

Sources

DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code execution on DNN sites."