BS
Product
BSAFE SSL-J
22
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 6Medium 8Low 0
Watch
Add BSAFE SSL-J to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-34381 | 9.8 | Feb 2 | Dell BSAFE SSL-J version 7.0 and all versions prior to 6.5, and Dell BSAFE Crypto-J versions prior to 6.2.6.1 contain an unmaintained third-party component vulnerability Affected: before 6.5; 7.0 |
| CVE-2025-46638 | 7.5 | Jun 4 | Dell BSAFE SSL-J contains an allocation of resources without limits or throttling vulnerability Affected: before 7.4 |
| CVE-2024-29172 | 7.5 | Feb 12 | Dell BSAFE SSL-J, versions prior to 6.6 and versions 7.0 through 7.2, contains a deadlock vulnerability Affected: before 6.6; 7.0 before 7.2.1 |
| CVE-2024-29171 | 7.5 | Feb 12 | Dell BSAFE SSL-J, versions prior to 6.6 and versions 7.0 through 7.2, contains an Improper certificate verification vulnerability Affected: before 6.6; 7.0 before 7.2.1 |
| CVE-2022-24409 | 7.5 | Feb 23 | Dell BSAFE SSL-J contains remediation for a covert timing channel vulnerability that may be exploited by malicious users to compromise the affected system Affected: 6.1.0 before 6.4 |
| CVE-2015-0534 | 7.5 | Aug 20 | EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3, RSA BSAFE Crypto-J before 6.2, RSA BSAFE SSL-J before 6.2, and RSA BSAFE SSL-C 2.8.9 and earlier… Affected: before 6.2 |
| CVE-2004-0079 | 7.5 | Nov 23 | The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake… Affected: 3.0; 3.0.1; 3.1 |
| CVE-2019-3738 | 6.5 | Sep 18 | RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to a Missing Required Cryptographic Step vulnerability Affected: through 6.2.4.1 |
| CVE-2019-3740 | 6.5 | Sep 18 | RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through Timing Discrepancy vulnerabilities during DSA key generation Affected: through 6.2.4.1 |
| CVE-2019-3739 | 6.5 | Sep 18 | RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing Discrepancy vulnerabilities during ECDSA key generation Affected: through 6.2.4.1 |
| CVE-2018-11069 | 5.9 | Sep 11 | RSA BSAFE SSL-J versions prior to 6.2.4 contain a Covert Timing Channel vulnerability during RSA decryption, also known as a Bleichenbacher attack on RSA decryption Affected: before 6.2.4 |
| CVE-2016-0887 | 5.9 | Apr 12 | EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x and 4.1.x before 4.1.5, RSA BSAFE Crypto-C Micro Edition (CCME) 4.0.x and 4.1.x before 4.1.3, RSA BSAFE Crypto-J before 6.2.1, RSA… Affected: before 6.2.1 |
| CVE-2018-11068 | 4.6 | Sep 11 | RSA BSAFE SSL-J versions prior to 6.2.4 contain a Heap Inspection vulnerability that could allow an attacker with physical access to the system to recover sensitive key material Affected: before 6.2.4 |
| CVE-2023-28077 | 4.4 | Feb 10 | Dell BSAFE SSL-J, versions prior to 6.5, and versions 7.0 and 7.1 contain a debug message revealing unnecessary information vulnerability Affected: 6.0 before 6.5.1; 7.0 before 7.1.1 |
| CVE-2022-34364 | 4.4 | Feb 10 | Dell BSAFE SSL-J, versions before 6.5 and version 7.0 contain a debug message revealing unnecessary information vulnerability Affected: before 6.5; 7.0 |
| CVE-2014-4630 | – | Dec 30 | EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.6 and RSA BSAFE SSL-J before 6.1.4 do not ensure that a server's X.509 certificate is the same during renegotiation as it… Affected: through 6.1.2 |
| CVE-2014-0627 | – | Feb 18 | The SSLEngine API implementation in EMC RSA BSAFE SSL-J 5.x before 5.1.3 and 6.x before 6.0.2 allows remote attackers to trigger the selection of a weak cipher suite by using the… Affected: 5.1.2; 6.0 |
| CVE-2014-0626 | – | Feb 18 | The (1) JSAFE and (2) JSSE APIs in EMC RSA BSAFE SSL-J 5.x before 5.1.3 and 6.x before 6.0.2 make it easier for remote attackers to bypass intended cryptographic protection… Affected: 5.1.2; 6.0 |
| CVE-2014-0625 | – | Feb 18 | The SSLSocket implementation in the (1) JSAFE and (2) JSSE APIs in EMC RSA BSAFE SSL-J 5.x before 5.1.3 and 6.x before 6.0.2 allows remote attackers to cause a denial of service… Affected: 5.1.2; 6.0 |
| CVE-2004-0081 | – | Nov 23 | OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the… Affected: 3.0; 3.0.1; 3.1 |
| CVE-2004-0112 | – | Nov 23 | The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake,… Affected: 3.0; 3.0.1; 3.1 |
| CVE-2001-1105 | – | Sep 12 | RSA BSAFE SSL-J 3.0, 3.0.1 and 3.1, as used in Cisco iCND 2.0, caches session IDs from failed login attempts, which could allow remote attackers to bypass SSL client… Affected: 3.0; 3.0.1; 3.1 |
Showing 22