Emc Rsa Bsafe SSL-J vulnerabilities

3 CVEs affecting Emc Rsa Bsafe SSL-J, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-0627, published 2014-02-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-0626, published 2014-02-18. Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days. The (1) JSAFE and (2) JSSE APIs in EMC RSA BSAFE SSL-J 5.x before 5.1.3 and 6.x before 6.0.2 make it easier for remote attackers to bypass intended cryptographic protection mechanisms by triggering…
CVE-2014-0625, published 2014-02-18. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. The SSLSocket implementation in the (1) JSAFE and (2) JSSE APIs in EMC RSA BSAFE SSL-J 5.x before 5.1.3 and 6.x before 6.0.2 allows remote attackers to cause a denial of service (memory consumption)…
CVE-2014-0627, published 2014-02-18. Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days. The SSLEngine API implementation in EMC RSA BSAFE SSL-J 5.x before 5.1.3 and 6.x before 6.0.2 allows remote attackers to trigger the selection of a weak cipher suite by using the wrap method during a…