CVE-2018-15769: Dell Bsafe

High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days.

RSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in 4.0.x series) and versions prior to 4.1.6.2 (in 4.1.x series) contain a key management error issue. A malicious TLS server could potentially cause a Denial Of Service (DoS) on TLS clients during the handshake when a very large prime value is sent to the TLS client, and an Ephemeral or Anonymous Diffie-Hellman cipher suite (DHE or ADH) is used.

Affected products

Dell Bsafe: from 4.0.0, before 4.0.11 (fixed in 4.0.11); from 4.1.0, before 4.1.6.2 (fixed in 4.1.6.2)
Oracle Application Testing Suite: version 13.3.0.1 only
Oracle Communications Analytics: version 12.1.1 only
Oracle Communications IP Service Activator: version 7.3.0 only; version 7.4.0 only
Oracle Core Rdbms: version 11.2.0.4 only; version 12.1.0.2 only; version 12.2.0.1 only; version 18c only; version 19c only
Oracle Enterprise Manager Ops Center: version 12.3.3 only; version 12.4.0 only
Oracle Goldengate Application Adapters: version 12.3.2.1.0 only
Oracle Jd Edwards Enterpriseone Tools: version 9.2 only
Oracle Real User Experience Insight: version 13.1.2.1 only; version 13.2.3.1 only; version 13.3.1.0 only
Oracle Retail Predictive Application Server: version 15.0.3 only; version 16.0.3.0 only
Oracle Security Service: version 11.1.1.9.0 only; version 12.1.3.0.0 only; version 12.2.1.3.0 only
Oracle Timesten In-Memory Database: before 18.1.4.1.0 (fixed in 18.1.4.1.0)

Published 2018-11-16. Last modified 2026-06-17.