Bsafe Ssl-j (Dell) - vulnerabilities (CVEs)
21 CVEs, 0 in the last 30 days, 46 known versions, newest CVE from 2026-06-04. Vendor: Dell.
CVEs of Bsafe Ssl-j
- CVE-2025-46638 - CVSS 7.5 (high), 2026-06-04: Dell BSAFE SSL-J contains an allocation of resources without limits or throttling vulnerability. An unauthenticated remote attacker could potentially exploit…
- CVE-2024-29172 - CVSS 7.5 (high), 2025-02-12: Dell BSAFE SSL-J, versions prior to 6.6 and versions 7.0 through 7.2, contains a deadlock vulnerability. A remote attacker could potentially exploit this…
- CVE-2024-29171 - CVSS 7.5 (high), 2025-02-12: Dell BSAFE SSL-J, versions prior to 6.6 and versions 7.0 through 7.2, contains an Improper certificate verification vulnerability. A remote attacker could…
- CVE-2023-28077 - CVSS 4.4 (medium), 2024-02-10: Dell BSAFE SSL-J, versions prior to 6.5, and versions 7.0 and 7.1 contain a debug message revealing unnecessary information vulnerability. This may lead to…
- CVE-2022-34381 - CVSS 9.8 (critical), 2024-02-02: Dell BSAFE SSL-J version 7.0 and all versions prior to 6.5, and Dell BSAFE Crypto-J versions prior to 6.2.6.1 contain an unmaintained third-party component…
- CVE-2022-34364 - CVSS 4.4 (medium), 2023-02-10: Dell BSAFE SSL-J, versions before 6.5 and version 7.0 contain a debug message revealing unnecessary information vulnerability. This may lead to disclosing…
- CVE-2022-24409 - CVSS 7.5 (high), 2022-02-23: Dell BSAFE SSL-J contains remediation for a covert timing channel vulnerability that may be exploited by malicious users to compromise the affected system.…
- CVE-2019-3739 - CVSS 6.5 (medium), 2019-09-18: RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing Discrepancy vulnerabilities during ECDSA key generation. A…
- CVE-2019-3738 - CVSS 6.5 (medium), 2019-09-18: RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to a Missing Required Cryptographic Step vulnerability. A malicious remote attacker could…
- CVE-2019-3740 - CVSS 6.5 (medium), 2019-09-18: RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through Timing Discrepancy vulnerabilities during DSA key generation. A…
- CVE-2018-11068 - CVSS 4.6 (medium), 2018-09-11: RSA BSAFE SSL-J versions prior to 6.2.4 contain a Heap Inspection vulnerability that could allow an attacker with physical access to the system to recover…
- CVE-2018-11069 - CVSS 5.9 (medium), 2018-09-11: RSA BSAFE SSL-J versions prior to 6.2.4 contain a Covert Timing Channel vulnerability during RSA decryption, also known as a Bleichenbacher attack on RSA…
- CVE-2016-0887 - CVSS 5.9 (medium), 2016-04-12: EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x and 4.1.x before 4.1.5, RSA BSAFE Crypto-C Micro Edition (CCME) 4.0.x and 4.1.x before 4.1.3, RSA BSAFE Crypto-J…
- CVE-2015-0534 - CVSS 7.5 (high), 2015-08-20: EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3, RSA BSAFE Crypto-J before 6.2, RSA BSAFE SSL-J before 6.2, and RSA BSAFE…
- CVE-2014-4630 - CVSS 4.3 (medium), 2014-12-30: EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.6 and RSA BSAFE SSL-J before 6.1.4 do not ensure that a server's X.509 certificate is the same during…
- CVE-2014-0627 - CVSS 5 (medium), 2014-02-18: The SSLEngine API implementation in EMC RSA BSAFE SSL-J 5.x before 5.1.3 and 6.x before 6.0.2 allows remote attackers to trigger the selection of a weak…
- CVE-2014-0626 - CVSS 5 (medium), 2014-02-18: The (1) JSAFE and (2) JSSE APIs in EMC RSA BSAFE SSL-J 5.x before 5.1.3 and 6.x before 6.0.2 make it easier for remote attackers to bypass intended…
- CVE-2014-0625 - CVSS 5 (medium), 2014-02-18: The SSLSocket implementation in the (1) JSAFE and (2) JSSE APIs in EMC RSA BSAFE SSL-J 5.x before 5.1.3 and 6.x before 6.0.2 allows remote attackers to cause…
- CVE-2004-0112 - CVSS 5 (medium), 2004-11-23: The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets…
- CVE-2004-0081 - CVSS 5 (medium), 2004-11-23: OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as…
- CVE-2004-0079 - CVSS 7.5 (high), 2004-11-23: The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a…
- CVE-2001-1105 - CVSS 7.5 (high), 2001-09-12: RSA BSAFE SSL-J 3.0, 3.0.1 and 3.1, as used in Cisco iCND 2.0, caches session IDs from failed login attempts, which could allow remote attackers to bypass SSL…
