Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2018-8269

49
FAUCET Score

CVE-2018-8269 is a denial of service vulnerability in Microsoft.Data.OData, occurring when the OData Library improperly handles web requests. This vulnerability carries a CVSS score of 7.5 (HIGH), indicating it can be exploited remotely with low complexity to cause a complete loss of availability. While not actively exploited in the wild, a Metasploit module exists (EDB-46101), and the vulnerability has garnered significant community discussion and media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
Range not provided by sourceCPE matchmatch criteria
cpe:2.3:a:microsoft:microsoft.data.odata:-:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

7.5HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
3.6
CvssVersion
3.0

Exploit Intelligence

EPSS Score
25.75%
Probability of exploitation in next 30 days
EPSS Percentile
97.8%
Percentile rank of EPSS score among Peer Group
As of 2026-07-24
Model: v2026.06.15
ExploitDB: EDB-46101 · Jan 9, 2019
This CVE's current EPSS score of 0.2575 is in the 96th percentile among its peer group of 51,455 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (9)

microsoftpatch availablevia nvd_reference
View patch
microsoftpatch availablevia msrc
Product: Microsoft.Data.OData
View patch
microsoftpatch availablevia msrc
Product: ASP.NET Core 2.1
View patch
microsoftpatch availablevia msrc
Product: ASP.NET Core 2.2
View patch
nugetpatch availablevia ghsa
Product: Microsoft.Data.ODataFixed in: 5.8.4
nugetpatch availablevia ghsa
Product: Microsoft.AspNetCore.DataProtection.AzureStorageFixed in: 2.2.7
nugetpatch availablevia ghsa
Product: Microsoft.AspNetCore.AllFixed in: 2.1.13
nugetpatch availablevia ghsa
Product: Microsoft.AspNetCore.AllFixed in: 2.2.7
nugetpatch availablevia ghsa
Product: Microsoft.AspNetCore.DataProtection.AzureStorageFixed in: 2.1.13

Vendor Advisories (2)

nugetGHSA-mv2r-q4g5-j8q5high

Denial of service in ASP.NET Core

Oct 16, 2018
microsoft2018-Sep/CVE-2018-8269Important

OData Denial of Service Vulnerability

Sep 11, 2018

References

portal.msrc.microsoft.com / en-US/security-guidance/advisory/CVE-2018-8269
PatchVendor Advisory
exploit-db.com / exploits/46101
ExploitThird Party AdvisoryVDB Entry
securityfocus.com / bid/105322
Third Party AdvisoryVDB Entry