CVE-2019-3740: dell bsafe_cert-j Cryptographic Issues
CVSS: 6.5v3.0MediumModified
Published 18-09-2019Last modified 08-10-2026
Vulnerability summary
CVE-2019-3740 is a medium (CVSS 6.5) Cryptographic Issues vulnerability in dell bsafe_cert-j. EPSS estimates a 3.89% chance of exploitation in the next 30 days, higher than 90.1% of scored vulnerabilities.
CVSS score
6.5/10
010
Medium · v3.0 (CVE.org)EPSS score
3.89%
0%100%
Low · +0.14 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 18-09-2019PublishedVulnerability first disclosed.
- 08-10-2026Last modifiedVulnerability information updated.
Description
RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through Timing Discrepancy vulnerabilities during DSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover DSA keys.
CVSS metrics
4 scores · 2 sources · 3 versionsMedium 6.5Preferred score · NVD (NIST)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NSourcesSingle source
Medium 6.5Preferred score · CVE.org (CNA)
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NSourcesAll 2 agree
- NVDNIST6.5MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Medium 4.3Preferred score · NVD (NIST)
AV:N/AC:M/Au:N/C:P/I:N/A:NSourcesSingle source
EPSS trend
Probability
3.89%
Chance of exploitation in the next 30 days
Percentile
90%
Versus all other CVEs
30-day change
+0.14 pp
From 3.75% on 18-09-2026
18-09-202618-10-2026
EPSS score3.89%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-310Cryptographic IssuesWeaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.
- CWE-203Observable DiscrepancyThe product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor.
Affected systems
Oracle15 products
- application_performance_management13.3.0.0 | 13.4.0.0
- communications_network_integrity7.3.2 | 7.3.5 | 7.3.6
- communications_unified_inventory_management7.3.2 | 7.3.4 | 7.3.5 | 7.4.0 | 7.4.1
- database12.1.0.2 | 12.2.0.1 | 18c | 19c
- global_lifecycle_management_opatch< 12.2.0.1.22
Dell4 products
- bsafe_cert-j≤ 6.2.4
- bsafe_crypto-j< 6.2.5
- bsafe_ssl-j≤ 6.2.4.1
- rsa bsafe crypto-jprior to 6.2.5
2 vendors · 19 products