CVE-2025-26333 — Information Exposure via Error Message in Dell Bsafe Crypto-j

CWE-209 — Information Exposure via Error Message4 documents4 sources
Severity
7.5HIGHNVD
CNA5.9
EPSS
0.0%
top 87.08%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Dell Bsafe Crypto-j
Timeline
PublishedSep 25
Latest updateJan 15

Description

Dell BSAFE Crypto-J generates an error message that includes sensitive information about its environment and associated data. A remote attacker could potentially exploit this vulnerability, leading to information exposure.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5dell/bsafe_crypto-j7.0 — 7.0.1+1
▶NVDdell/bsafe_crypto-j6.0 — 6.3.1+1

🔴Vulnerability Details

2
GHSA
GHSA-j375-j583-3cwf: Dell Crypto-J generates an error message that includes sensitive information about its environment and associated data↗2025-09-25
▶
CVEList
CVE-2025-26333: Dell BSAFE Crypto-J generates an error message that includes sensitive information about its environment and associated data↗2025-09-25
▶

📋Vendor Advisories

1
Oracle
Oracle Oracle Communications Risk Matrix: Platform (BSAFE Crypto-J) — CVE-2025-26333↗2026-01-15
▶
CVE-2025-26333 — Information Exposure via Error Message | cvebase