Dell BSAFE SSL-J version 7.0 and all versions prior to 6.5, and Dell BSAFE Crypto-J versions prior to 6.2.6.1 contain an unmaintained third-party component vulnerability.
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.00979·Published 2024-02-02·Fixed in 6.2.6.1, 6.5CWE-1329
RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through Timing Discrepancy vulnerabilities during DSA key generation.
CVSS 3.1MEDIUM 6.5·Network·No auth·User interaction·EPSS 0.03889·Published 2019-09-18·Fixed in 6.2.5CWE-310
RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing Discrepancy vulnerabilities during ECDSA key generation.
CVSS 3.1MEDIUM 6.5·Network·No auth·User interaction·EPSS 0.0263·Published 2019-09-18·Fixed in 6.2.5CWE-310
EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x and 4.1.x before 4.1.5, RSA BSAFE Crypto-C Micro Edition (CCME) 4.0.x and 4.1.x before 4.1.3, RSA BSAFE Crypto-J before 6.2.1, RSA BSAFE SSL-J before 6.2.1, and RSA BSAFE SSL…
RSA BSAFE Crypto-J versions prior to 6.2.4 and RSA BSAFE SSL-J versions prior to 6.2.4 contain a Covert Timing Channel vulnerability during PKCS #1 unpadding operations, also known as a Bleichenbacher attack.
CVSS 3.1MEDIUM 5.9·Network·No auth·No interaction·EPSS 0.01656·Published 2018-09-11·Fixed in 6.2.4CWE-327
The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation (Dual_EC_DRBG) algorithm contains point Q constants with a possible relationship to certain "skeleton key" values, whic…