Read the docs

OpenSSL

Records324All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical28CVSS 9.0–10.0
CVSS high103CVSS 7.0–8.9

Exploited now

OpenSSL records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Fips Object Module · all components

Priority LOW 33

The PRNG implementation for the OpenSSL FIPS Object Module 1.1.1 does not perform auto-seeding during the FIPS self-test, which generates random data that is more predictable than expected and makes it easier for attacke…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.02312 Published 2007-12-01 No fix listed CWE-310
Open these records in search →