Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2024-21319
HistoryJan 09, 2024 - 7:15 p.m.

CVE-2024-21319

2024-01-0919:15:12
NVD-CWE-noinfo
CWE-20
[email protected]
web.nvd.nist.gov
133
microsoft
identity
dos
cve-2024-21319
nvd

6.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

6.7 Medium

AI Score

Confidence

High

3.3 Low

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:M/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

43.4%

JSON

Microsoft Identity Denial of service vulnerability

VendorProductVersionCPE
microsoft.net_6.0*cpe:2.3:a:microsoft:.net_6.0:*:*:*:*:*:*:*:*
microsoftmicrosoft_visual_studio_2022_17.2*cpe:2.3:a:microsoft:microsoft_visual_studio_2022_17.2:*:*:*:*:*:*:*:*
microsoftmicrosoft_visual_studio_2022_17.6*cpe:2.3:a:microsoft:microsoft_visual_studio_2022_17.6:*:*:*:*:*:*:*:*
microsoftmicrosoft_visual_studio_2022_17.4*cpe:2.3:a:microsoft:microsoft_visual_studio_2022_17.4:*:*:*:*:*:*:*:*
microsoftmicrosoft_visual_studio_2022_17.8*cpe:2.3:a:microsoft:microsoft_visual_studio_2022_17.8:*:*:*:*:*:*:*:*
microsoft.net_7.0*cpe:2.3:a:microsoft:.net_7.0:*:*:*:*:*:*:*:*
microsoft.net_8.0*cpe:2.3:a:microsoft:.net_8.0:*:*:*:*:*:*:*:*
microsoftidentity_model5.3.0cpe:2.3:a:microsoft:identity_model:5.3.0:*:*:*:*:.net:*:*
microsoftidentity_model5.3.0cpe:2.3:a:microsoft:identity_model:5.3.0:*:*:*:*:.net:*:*
microsoftidentity_model5.3.0cpe:2.3:a:microsoft:identity_model:5.3.0:*:*:*:*:.net:*:*
Rows per page:
1-10 of 131

Related

osv 18
prion 1
github 4
veracode 1
ubuntucve 1
alpinelinux 1
redhatcve 2
mscve 1
nessus 28
openvas 4
kaspersky 2
ubuntu 1
cve 1
debiancve 1
almalinux 6
oraclelinux 6
redhat 7
rocky 3
mskb 3
rapid7blog 1
osv
osv
Microsoft ASP.NET Core project templates vulnerable to denial of service
2024-01-09 19:35:02
Microsoft Identity Denial of service vulnerability
2024-01-09 18:28:03
BIT-dotnet-2024-21319
2024-03-06 10:51:16
prion
prion
Denial of service
2024-01-09 19:15:00
github
github
Microsoft ASP.NET Core project templates vulnerable to denial of service
2024-01-09 19:35:02
JWX vulnerable to a denial of service attack using compressed JWE message
2024-03-08 15:06:53
python-jose denial of service via compressed JWT tokens
2024-04-26 00:30:35
veracode
veracode
Denial Of Service (DoS)
2024-01-10 10:01:02
ubuntucve
ubuntucve
CVE-2024-21319
2024-01-09 00:00:00
alpinelinux
alpinelinux
CVE-2024-21319
2024-01-09 19:15:12
redhatcve
redhatcve
CVE-2024-21319
2024-01-10 05:02:11
CVE-2024-33664
2024-04-26 06:04:33
mscve
mscve
Microsoft Identity Denial of service vulnerability
2024-01-09 08:00:00
nessus
nessus
Ubuntu 22.04 LTS / 23.04 / 23.10 : .NET vulnerabilities (USN-6578-1)
2024-01-11 00:00:00
Oracle Linux 8 : .NET / 7.0 (ELSA-2024-0157)
2024-01-18 00:00:00
RHEL 9 : .NET 7.0 (RHSA-2024:0151)
2024-01-10 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-6578-1)
2024-01-12 00:00:00
.NET Core Multiple Vulnerabilities (KB5033741)
2024-01-11 00:00:00
.NET Core Multiple Vulnerabilities (KB5033733)
2024-01-11 00:00:00
kaspersky
kaspersky
KLA62826 Multiple vulnerabilities in Microsoft Azure
2024-01-09 00:00:00
KLA62822 Multiple vulnerabilities in Microsoft Developer Tools
2024-01-09 00:00:00
ubuntu
ubuntu
.NET vulnerabilities
2024-01-11 00:00:00
cve
cve
CVE-2024-33664
2024-04-26 00:15:09
debiancve
debiancve
CVE-2024-33664
2024-04-26 00:15:09
almalinux
almalinux
Important: .NET 7.0 security update
2024-01-10 00:00:00
Important: .NET 8.0 security update
2024-01-10 00:00:00
Important: .NET 6.0 security update
2024-01-10 00:00:00
oraclelinux
oraclelinux
.NET 7.0 security update
2024-01-17 00:00:00
.NET 8.0 security update
2024-01-17 00:00:00
.NET 7.0 security update
2024-01-16 00:00:00
redhat
redhat
(RHSA-2024:0150) Important: .NET 8.0 security update
2024-01-10 15:15:53
(RHSA-2024:0152) Important: .NET 8.0 security update
2024-01-10 15:18:52
(RHSA-2024:0255) Important: .NET 6.0 security, bug fix, and enhancement update
2024-01-15 15:30:34
rocky
rocky
.NET 7.0 security update
2024-01-12 19:57:42
.NET 8.0 security update
2024-01-12 19:57:42
.NET 6.0 security update
2024-01-12 19:57:42
mskb
mskb
.NET 8.0 Update - January 09, 2024 (KB5033741)
2024-01-09 08:00:00
.NET 6.0 Update - January 09, 2024 (KB5033733)
2024-01-09 08:00:00
.NET 7.0 Update - January 09, 2024 (KB5033734)
2024-01-09 08:00:00
rapid7blog
rapid7blog
Patch Tuesday - January 2024
2024-01-09 21:23:10

6.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

6.7 Medium

AI Score

Confidence

High

3.3 Low

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:M/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

43.4%

JSON
Related for CVE-2024-21319
osv18prion1github4veracode1ubuntucve1alpinelinux1redhatcve2mscve1nessus28openvas4kaspersky2ubuntu1cve1debiancve1almalinux6oraclelinux6redhat7rocky3mskb3rapid7blog1