[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fwgtHUEEqDXaG6cGWijpYt0CAx0mVW2A6Sa_otovgK1g":3,"g5a-risk:CVE-2018-8171":151},{"success":4,"data":5,"meta":149},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":15,"epssTimeSeries":40,"severity":42,"affectedProducts":43,"affectedProductsCount":35,"references":62,"referencesCount":79,"weaknesses":80,"weaknessesCount":89,"isActivelyExploited":90,"cisaInfo":15,"otxData":15,"relatedBlogPosts":91,"seoMetadata":92,"configurations":117,"relatedVendorCves":133,"notableEvents":134},"CVE-2018-8171","What is CVE-2018-8171?","A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka \"ASP.NET Security Feature Bypass Vulnerability.\" This affects ASP.NET, ASP.NET Core 1.1, ASP.NET Core 1.0, ASP.NET Core 2.0, ASP.NET MVC 5.2.","A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka \"ASP.NET Security Feature Bypass ...","2018-07-11T00:29:00.32","2021-06-30T16:52:59.21",7.5,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":24,"IntegrityImpact":26,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH",3.9,3.6,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":24,"IntegrityImpact":34,"AvailabilityImpact":24,"BaseScore":35,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:P\u002FA:N","PARTIAL",5,"MEDIUM",10,2.9,0.10774,[41,41,41,41,41,41,39],0.1048,"High",[44,49,52,54,58],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"microsoft","asp.net_core","1.0","cpe:2.3:a:microsoft:asp.net_core:1.0:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":50,"criteria":51,"vulnerable":4},"1.1","cpe:2.3:a:microsoft:asp.net_core:1.1:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":32,"criteria":53,"vulnerable":4},"cpe:2.3:a:microsoft:asp.net_core:2.0:*:*:*:*:*:*:*",{"vendor":45,"product":55,"version":56,"criteria":57,"vulnerable":4},"asp.net_model_view_controller","5.2","cpe:2.3:a:microsoft:asp.net_model_view_controller:5.2:*:*:*:*:*:*:*",{"vendor":45,"product":59,"version":60,"criteria":61,"vulnerable":4},"asp.net_webpages","3.2.3","cpe:2.3:a:microsoft:asp.net_webpages:3.2.3:*:*:*:*:*:*:*",[63,69,73],{"url":64,"source":65,"tags":66},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F104659","Securityfocus",[67,68],"Third Party Advisory","VDB Entry",{"url":70,"source":71,"tags":72},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1041267","Securitytracker",[67,68],{"url":74,"source":75,"tags":76},"https:\u002F\u002Fportal.msrc.microsoft.com\u002Fen-US\u002Fsecurity-guidance\u002Fadvisory\u002FCVE-2018-8171","Microsoft",[77,78],"Vendor Advisory","Patch",3,[81],{"id":82,"name":83,"description":84,"extendedDescription":85,"status":86,"abstraction":87,"structure":88},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",1,false,[],{"title":93,"metaDescription":94,"keywords":95,"canonicalUrl":96,"structuredData":97},"What is CVE-2018-8171? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-8171, a high severity cyber security vulnerability from 2018. A Security Feature Bypass vulnerability exists in ASP.NET wh...","CVE-2018-8171, CVE-2018-8171 vulnerability, CVE-2018-8171 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, microsoft security, asp.net_core vulnerability, asp.net_model_view_controller vulnerability, asp.net_webpages vulnerability","\u002Fwhat-is\u002Fcve-2018-8171",{"@context":98,"@type":99,"headline":93,"description":94,"datePublished":10,"dateModified":11,"author":100,"publisher":104,"about":108,"mainEntityOfPage":112,"articleSection":115,"keywords":116},"https:\u002F\u002Fschema.org","TechArticle",{"@type":101,"name":102,"url":103},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":101,"name":102,"url":103,"logo":105},{"@type":106,"url":107},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":109,"name":6,"description":110,"additionalType":111},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":113,"@id":114},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-8171","Cybersecurity","CVE-2018-8171, CVE-2018-8171 vulnerability, CVE-2018-8171 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[118],{"Operator":15,"Negate":15,"Nodes":119},[120],{"Operator":121,"Negate":15,"CPEMatch":122},"OR",[123,125,127,129,131],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":124,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"0913F82A-985A-401D-89F6-191684A8AB55",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":126,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"8256236D-D4F0-4207-B82D-18B0135CEB4E",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":128,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"345222C2-CD5B-4613-9FF3-9D034974D54F",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":130,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"72194690-5B02-4E16-81CE-8447790D67A4",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":132,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"E601B5A5-E15B-43BD-98D7-20CBF28A55C6",[],[135,142],{"id":136,"eventType":137,"eventTime":138,"details":139,"label":140,"color":141},"0d0853bd-7a80-41b7-b65f-f9e7410be616","LOW_EPSS_DELTA","2025-11-19T04:06:43.086371+00:00","Daily EPSS score decreased by 0.116 on 2023-12-30","EPSS Score Decreased","green",{"id":143,"eventType":144,"eventTime":145,"details":146,"label":147,"color":148},"b33e5cfb-889c-4c98-8955-0db0a5b66e7e","HIGH_EPSS_DELTA","2025-11-22T04:06:31.022306+00:00","Daily EPSS score increased by 0.116 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":150,"version":32},1792238299384,{"score":152,"band":153,"action":154,"scoredAt":155},47,"Medium","Plan remediation","2026-10-16T06:44:27.3201+00:00"]