Legion Of The Bouncy Castle Bouncycastle TLS vulnerabilities

1 vulnerability

Known vulnerabilities in Legion Of The Bouncy Castle Bouncycastle TLS, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2017-13098bouncycastlebc-java+4
EPSS score
24.28%
BouncyCastle TLS prior to version 1.0.3, when configured to use the JCE (Java Cryptography Extension) for cryptographic functions, provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover the private key from a vulnerable application. This vulnerability is referred to as "ROBOT."