Dell Bsafe Crypto-J vulnerabilities

10 CVEs affecting Dell Bsafe Crypto-J, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-26333, published 2025-09-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-3740, published 2019-09-18. Medium severity, CVSS 6.5. EPSS: 3.9% chance of exploitation in the next 30 days. RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through Timing Discrepancy vulnerabilities during DSA key generation. A malicious remote attacker could…
CVE-2016-0887, published 2016-04-12. Medium severity, CVSS 5.9. EPSS: 3.5% chance of exploitation in the next 30 days. EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x and 4.1.x before 4.1.5, RSA BSAFE Crypto-C Micro Edition (CCME) 4.0.x and 4.1.x before 4.1.3, RSA BSAFE Crypto-J before 6.2.1, RSA BSAFE SSL-J before…
CVE-2019-3739, published 2019-09-18. Medium severity, CVSS 6.5. EPSS: 2.6% chance of exploitation in the next 30 days. RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing Discrepancy vulnerabilities during ECDSA key generation. A malicious remote attacker could potentially…
CVE-2016-8212, published 2017-02-03. High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days. An issue was discovered in EMC RSA BSAFE Crypto-J versions prior to 6.2.2. There is an Improper OCSP Validation Vulnerability. OCSP responses have two time values: thisUpdate and nextUpdate. These…
CVE-2019-3738, published 2019-09-18. Medium severity, CVSS 6.5. EPSS: 1.7% chance of exploitation in the next 30 days. RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to a Missing Required Cryptographic Step vulnerability. A malicious remote attacker could potentially exploit this vulnerability to coerce…
CVE-2018-11070, published 2018-09-11. Medium severity, CVSS 5.9. EPSS: 1.7% chance of exploitation in the next 30 days. RSA BSAFE Crypto-J versions prior to 6.2.4 and RSA BSAFE SSL-J versions prior to 6.2.4 contain a Covert Timing Channel vulnerability during PKCS #1 unpadding operations, also known as a…
CVE-2007-6755, published 2013-10-11. Medium severity, CVSS 5.8. EPSS: 1.6% chance of exploitation in the next 30 days. The NIST SP 800-90A default statement of the Dual Elliptic Curve Deterministic Random Bit Generation (Dual_EC_DRBG) algorithm contains point Q constants with a possible relationship to certain…
CVE-2016-8217, published 2017-02-03. Low severity, CVSS 3.7. EPSS: 1.5% chance of exploitation in the next 30 days. EMC RSA BSAFE Crypto-J versions prior to 6.2.2 has a PKCS#12 Timing Attack Vulnerability. A possible timing attack could be carried out by modifying a PKCS#12 file that has an integrity MAC for which…
CVE-2022-34381, published 2024-02-02. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. Dell BSAFE SSL-J version 7.0 and all versions prior to 6.5, and Dell BSAFE Crypto-J versions prior to 6.2.6.1 contain an unmaintained third-party component vulnerability. An unauthenticated remote…
CVE-2025-26333, published 2025-09-25. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Dell BSAFE Crypto-J generates an error message that includes sensitive information about its environment and associated data. A remote attacker could potentially exploit this vulnerability, leading…