Oracle Security Service vulnerabilities

23 CVEs affecting Oracle Security Service, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-61217, published 2026-07-21.

More from Oracle.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-11058, published 2018-09-14. Critical severity, CVSS 9.8. EPSS: 4% chance of exploitation in the next 30 days. RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition, version prior to 4.0.5.3 (in 4.0.x) contain a Buffer Over-Read…
• CVE-2018-2765, published 2018-04-19. High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Security Service component of Oracle Fusion Middleware (subcomponent: Oracle SSL API). Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0, 12.2.1.2.0 and…
• CVE-2018-11054, published 2018-08-31. High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days. RSA BSAFE Micro Edition Suite, version 4.1.6, contains an integer overflow vulnerability. A remote attacker could use maliciously constructed ASN.1 data to potentially cause a Denial Of Service.
• CVE-2018-15769, published 2018-11-16. High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days. RSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in 4.0.x series) and versions prior to 4.1.6.2 (in 4.1.x series) contain a key management error issue. A malicious TLS server could potentially…
• CVE-2020-5360, published 2020-12-16. High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days. Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to a Buffer Under-Read Vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability resulting…
• CVE-2018-11056, published 2018-08-31. Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days. RSA BSAFE Micro Edition Suite, prior to 4.1.6.1 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.3 (in 4.0.x) contain an Uncontrolled Resource Consumption ('Resource…
• CVE-2018-11057, published 2018-08-31. Medium severity, CVSS 5.9. EPSS: 1.7% chance of exploitation in the next 30 days. RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x) contains a Covert Timing Channel vulnerability during RSA decryption, also known as a Bleichenbacher…
• CVE-2017-10166, published 2017-10-19. Low severity, CVSS 3.7. EPSS: 1.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Security Service component of Oracle Fusion Middleware (subcomponent: C Oracle SSL API). Supported versions that are affected are FMW: 11.1.1.9.0 and 12.1.3.0.0. Difficult…
• CVE-2020-14530, published 2020-07-15. Medium severity, CVSS 5.9. EPSS: 1.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: None). The supported version that is affected is 11.1.1.9.0. Difficult to exploit vulnerability allows…
• CVE-2020-29508, published 2022-07-11. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Improper Input Validation Vulnerability.

Latest

• CVE-2026-61217, published 2026-07-21. Medium severity, CVSS 6.4. EPSS: 0.1% chance of exploitation in the next 30 days. Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: Oracle SSL API). The supported version that is affected is 12.2.1.4.0. Difficult to exploit…
• CVE-2020-35169, published 2022-07-11. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain an Improper Input Validation Vulnerability.
• CVE-2020-35168, published 2022-07-11. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.
• CVE-2020-35167, published 2022-07-11. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.
• CVE-2020-35166, published 2022-07-11. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.
• CVE-2020-35164, published 2022-07-11. High severity, CVSS 8.1. EPSS: 0.8% chance of exploitation in the next 30 days. Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.
• CVE-2020-35163, published 2022-07-11. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain a Use of Insufficiently Random Values Vulnerability.
• CVE-2020-29507, published 2022-07-11. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Dell BSAFE Crypto-C Micro Edition, versions before 4.1.4, and Dell BSAFE Micro Edition Suite, versions before 4.4, contain an Improper Input Validation Vulnerability.
• CVE-2020-29506, published 2022-07-11. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain an Observable Timing Discrepancy Vulnerability.