CVE-2015-7824: Botan Project Botan

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

botan 1.11.x before 1.11.22 makes it easier for remote attackers to decrypt TLS ciphertext data via a padding-oracle attack against TLS CBC ciphersuites.

Affected products

• Botan Project Botan: up to and including 1.11.21

Published 2017-04-10. Last modified 2026-06-17.