CVE-2020-35167: Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy…

PriorityP345critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

EPSS

1.04%

60.3th percentile

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.

Affected

12 ranges

Vendor	Product	Version range	Fixed in
dell	bsafe_crypto-c-micro-edition	< 4.1.5	4.1.5
dell	bsafe_micro-edition-suite	< 4.6	4.6
dell	dell_bsafe_crypto-c_micro_edition	>= unspecified < 4.1.5 or 4.1.4.1	4.1.5 or 4.1.4.1
oracle	database	—	—
oracle	database	—	—
oracle	database	—	—
oracle	http_server	—	—
oracle	http_server	—	—
oracle	security_service	—	—
oracle	security_service	—	—
oracle	weblogic_server_proxy_plug-in	—	—
oracle	weblogic_server_proxy_plug-in	—	—

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.