CVE-2020-35168
published 2022-07-11CVE-2020-35168: Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy…
PriorityP344critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.48%
38.5th percentile
Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| dell | bsafe_crypto-c-micro-edition | < 4.1.5 | 4.1.5 |
| dell | bsafe_micro-edition-suite | < 4.6 | 4.6 |
| dell | dell_bsafe_crypto-c_micro_edition | >= unspecified < 4.1.5, 4.6 | 4.1.5, 4.6 |
| oracle | database | — | — |
| oracle | database | — | — |
| oracle | database | — | — |
| oracle | http_server | — | — |
| oracle | http_server | — | — |
| oracle | security_service | — | — |
| oracle | security_service | — | — |
| oracle | weblogic_server_proxy_plug-in | — | — |
| oracle | weblogic_server_proxy_plug-in | — | — |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
vendor_oracle9.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Oracle
Oracle Oracle Systems Risk Matrix: Application Server (Dell BSAFE Micro Edition Suite) — CVE-2020-35168
vendor_oracle·2024-04-15·CVSS 9.8
CVE-2020-35168 [MEDIUM] Oracle Oracle Systems Risk Matrix: Application Server (Dell BSAFE Micro Edition Suite) — CVE-2020-35168
Oracle Oracle Systems Risk Matrix: Application Server (Dell BSAFE Micro Edition Suite) vulnerability
CVE: CVE-2020-35168
CVSS: 9.8
Protocol: HTTPS
Remote exploit: Yes
Affected versions: Network
Advisory: cpuapr2024 (APR 2024)
Oracle
Oracle Oracle TimesTen In-Memory Database Risk Matrix: TimesTen IMDB (Dell BSAFE Micro Edition Suite) — CVE-2020-35168
vendor_oracle·2023-07-15·CVSS 8.1
CVE-2020-35168 [MEDIUM] Oracle Oracle TimesTen In-Memory Database Risk Matrix: TimesTen IMDB (Dell BSAFE Micro Edition Suite) — CVE-2020-35168
Oracle Oracle TimesTen In-Memory Database Risk Matrix: TimesTen IMDB (Dell BSAFE Micro Edition Suite) vulnerability
CVE: CVE-2020-35168
CVSS: 8.1
Protocol: Multiple
Remote exploit: Yes
Affected versions: Network
Advisory: cpujul2023 (JUL 2023)
Oracle
Oracle Oracle Communications Applications Risk Matrix: Other (Dell BSAFE Micro Edition Suite) — CVE-2020-35168
vendor_oracle·2023-04-15·CVSS 9.8
CVE-2020-35168 [MEDIUM] Oracle Oracle Communications Applications Risk Matrix: Other (Dell BSAFE Micro Edition Suite) — CVE-2020-35168
Oracle Oracle Communications Applications Risk Matrix: Other (Dell BSAFE Micro Edition Suite) vulnerability
CVE: CVE-2020-35168
CVSS: 9.8
Protocol: Oracle Net
Remote exploit: Yes
Affected versions: Network
Advisory: cpuapr2023 (APR 2023)
GHSA
GHSA-66xw-cm7f-gxw3: Dell BSAFE Crypto-C Micro Edition, versions before 4
ghsa_unreviewed·2022-07-12
CVE-2020-35168 [CRITICAL] GHSA-66xw-cm7f-gxw3: Dell BSAFE Crypto-C Micro Edition, versions before 4
Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite,
versions before 4.6, contain an Observable Timing Discrepancy Vulnerability.
No detection rules found.
No public exploits indexed.
Qualys
Oracle Security Updates, April 2024: Critical Patch | Qualys
blogs_qualys·2024-04-17
Oracle Security Updates, April 2024: Critical Patch | Qualys
#### Table of Contents
- Qualys QID Coverage
- Notable Oracle Vulnerabilities Patched
- Discover and Prioritize Vulnerabilities in Vulnerability Management, Detection & Response (VMDR)
- Rapid Response with Patch Management (PM)
Oracle released its second quarterly edition of Critical Patch Update, which contains patches for 441 security vulnerabilities. Some of the vulnerabilities addressed in this update impact more than one product. These patches address vulnerabilities in various product families, including third-party components in Oracle products.
In the second quarterly Oracle Critical Patch Update, Oracle Communications received the highest number of patches, 93, constituting about 21% of the total patches released. Oracle Fusion Middleware and Oracle Financial Services Applicat
Qualys
Oracle Patch Update, April 2024 Security Update Review
blogs_qualys·2024-04-17
Oracle Patch Update, April 2024 Security Update Review
## Table of Contents
Qualys QID Coverage
Notable Oracle Vulnerabilities Patched
Discover and Prioritize Vulnerabilities in Vulnerability Management, Detection & Response (VMDR)
Rapid Response with Patch Management (PM)
Oracle released its second quarterly edition of Critical Patch Update, which contains patches for 441 security vulnerabilities. Some of the vulnerabilities addressed in this update impact more than one product. These patches address vulnerabilities in various product families, including third-party components in Oracle products.
In the second quarterly Oracle Critical Patch Update, Oracle Communications received the highest number of patches, 93, constituting about 21% of the total patches released. Oracle Fusion Middleware and Oracle Financial Services Applications fo
Qualys
Oracle Security Updates: Critical Patch April 2023 Advisory | Qualys
blogs_qualys·2023-04-19
Oracle Security Updates: Critical Patch April 2023 Advisory | Qualys
#### Table of Contents
- Qualys QID Coverage
- Notable Oracle Vulnerabilities Patched
- Discover and Prioritize Vulnerabilities in Vulnerability Management, Detection & Response (VMDR)
- Rapid Response with Patch Management (PM)
Oracle has released the second quarterly edition of Critical Patch Update, which contains a group of patches for 433 security vulnerabilities. Some of the vulnerabilities addressed this month impact various products. These patches address vulnerabilities in Oracle code and third-party components included in Oracle products.
During Q2 2023 Oracle Critical Patch Update, the Oracle Communications product suite recorded the highest number of patches at 77, constituting 17% of the total patches released. The Oracle Financial Services Applications and Oracle Fusion Mi
Qualys
Oracle Patch Tuesday April 2023 Security Update Review
blogs_qualys·2023-04-19
Oracle Patch Tuesday April 2023 Security Update Review
## Table of Contents
Qualys QID Coverage
Notable Oracle Vulnerabilities Patched
Discover and Prioritize Vulnerabilities in Vulnerability Management, Detection & Response (VMDR)
Rapid Response with Patch Management (PM)
Oracle has released the second quarterly edition of Critical Patch Update, which contains a group of patches for 433 security vulnerabilities. Some of the vulnerabilities addressed this month impact various products. These patches address vulnerabilities in Oracle code and third-party components included in Oracle products.
During Q2 2023 Oracle Critical Patch Update, the Oracle Communications product suite recorded the highest number of patches at 77, constituting 17% of the total patches released. The Oracle Financial Services Applications and Oracle Fusion Middlewar
Wiz
CVE-2026-21962 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz·CVSS 10.0
CVE-2026-21962 [CRITICAL] CVE-2026-21962 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2026-21962 :
Weblogic Server Proxy Plug-in for Apache HTTP Server vulnerability analysis and mitigation
Vulnerability in the Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: Weblogic Server Proxy Plug-in for Apache HTTP Server, Weblogic Server Proxy Plug-in for IIS). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in. While the vulnerability is in Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthori
https://www.dell.com/support/kbdoc/en-us/000181115/dsa-2020-286-dell-bsafe-crypto-c-micro-edition-4-1-5-and-dell-bsafe-micro-edition-suite-4-6-multiple-security-vulnerabilitieshttps://www.oracle.com/security-alerts/cpujul2022.htmlhttps://www.dell.com/support/kbdoc/en-us/000181115/dsa-2020-286-dell-bsafe-crypto-c-micro-edition-4-1-5-and-dell-bsafe-micro-edition-suite-4-6-multiple-security-vulnerabilitieshttps://www.oracle.com/security-alerts/cpujul2022.html
2022-07-11
Published