CVE-2007-6721
Estado: ModificadaAlta (10)—
The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes."
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
- Puntuación base: 10
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 2.41%
- Percentil entre todas las CVEs puntuadas: 84
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (2)
CWE
- NVD-CWE-noinfo
Referencias
- http://freshmeat.net/projects/bouncycastlecryptoapi/releases/265580
- http://www.bouncycastle.org/csharp/
- http://www.bouncycastle.org/devmailarchive/msg08195.html
- http://www.bouncycastle.org/releasenotes.html
- http://www.osvdb.org/50358
- http://www.osvdb.org/50359
- http://www.osvdb.org/50360
- http://freshmeat.net/projects/bouncycastlecryptoapi/releases/265580
- http://www.bouncycastle.org/csharp/
- http://www.bouncycastle.org/devmailarchive/msg08195.html
- http://www.bouncycastle.org/releasenotes.html
- http://www.osvdb.org/50358
- http://www.osvdb.org/50359
- http://www.osvdb.org/50360
JSON original (NVD)
Mostrar
{
"id": "CVE-2007-6721",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 10,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": true,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2009-03-30T01:30:00.217",
"references": [
{
"url": "http://freshmeat.net/projects/bouncycastlecryptoapi/releases/265580",
"source": "cve@mitre.org"
},
{
"url": "http://www.bouncycastle.org/csharp/",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.bouncycastle.org/devmailarchive/msg08195.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.bouncycastle.org/releasenotes.html",
"source": "cve@mitre.org"
},
{
"url": "http://www.osvdb.org/50358",
"source": "cve@mitre.org"
},
{
"url": "http://www.osvdb.org/50359",
"source": "cve@mitre.org"
},
{
"url": "http://www.osvdb.org/50360",
"source": "cve@mitre.org"
},
{
"url": "http://freshmeat.net/projects/bouncycastlecryptoapi/releases/265580",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.bouncycastle.org/csharp/",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.bouncycastle.org/devmailarchive/msg08195.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.bouncycastle.org/releasenotes.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.osvdb.org/50358",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.osvdb.org/50359",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.osvdb.org/50360",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to \"a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes.\""
},
{
"lang": "es",
"value": "La Legión de la API de Bouncy Castle Java Cryptography anterior a versión 1.38, como es usada en Crypto Provider Package anterior a versión 1.36, presenta un impacto desconocido y vectores de ataque remoto relacionados con \"a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes\"."
}
],
"lastModified": "2026-06-16T22:48:38.753",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:bouncycastle:bc-java:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "71630DBB-121C-4EF2-8BC8-69EF824536C9",
"versionEndIncluding": "1.37"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bc-java:1.01:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "074B7733-B554-4C60-8B6C-711082FBC981"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bc-java:1.02:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6B065EFF-5CBE-4B4E-B5ED-C97ACC17F913"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bc-java:1.03:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "74053B79-26E8-4E5C-8BAA-623B6F8C2406"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bc-java:1.04:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8A673F86-9038-4DDC-BC42-CDAA82E31D18"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bc-java:1.05:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "27BA92FF-CCD7-43A7-880B-63F749BE134A"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bc-java:1.06:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A587B9F5-BA5F-4470-84A7-551C15143F80"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bc-java:1.07:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CF1C6753-A077-4BC1-96D6-42408D576371"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bc-java:1.08:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D9F1242D-E49C-49E8-B011-ACCD096BB62F"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bc-java:1.09:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CB5B1AD3-F98A-4608-92E3-03D595DC24F9"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bc-java:1.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A3B73EA3-7055-47F4-927B-DAE9CCC0790B"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bc-java:1.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "754ACBCB-BF5C-49C2-8608-DF0B60F75C19"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bc-java:1.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6654B10A-5D16-4D13-A329-512A1D8100D5"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bc-java:1.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "33A9B4AA-4EBF-49A9-8081-68AE10D3B36D"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bc-java:1.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E57C145D-44AD-4D3D-AC95-A02F4343E9F6"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bc-java:1.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "581016A0-9C71-4C69-BA07-DED9E58B9D20"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bc-java:1.16:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D7E76D59-7A74-44A9-9E34-F2573C7BD023"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bc-java:1.17:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F375FFAD-88A2-4DCE-A609-2965692483CE"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bc-java:1.18:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5C001773-96B8-4CC9-9841-EBAFD4724FBA"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bc-java:1.19:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2EAAD240-17C9-4804-9BDE-F13B94EC6580"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bc-java:1.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF897C5D-1751-4FCE-8814-51FBECB7143B"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bc-java:1.21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DBEF5C40-189C-4CA3-AC7E-7B06040AE984"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bc-java:1.22:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C232FE64-92E6-4090-BA28-53A6EC1794EC"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bc-java:1.23:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3BC9CEB4-0708-4BF2-B126-94ADC1F83870"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bc-java:1.24:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4C7FB2D4-C9FA-4B4D-9DA5-EF7262F00E44"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bc-java:1.25:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3B7DDC74-EAB2-4159-B234-6A282155D137"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bc-java:1.26:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E9BA1059-992E-4C20-A7CE-7113BA768663"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bc-java:1.27:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "27E1FB43-1D6B-48B0-ADA1-CCE1BFF03E87"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bc-java:1.28:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "989146A9-B308-4097-9E01-E6DE1DD7FCCE"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bc-java:1.29:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "59B24C7F-ABC5-43EC-86A0-5E1985522FCC"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bc-java:1.30:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C8010C1-C565-4743-9D15-40040FB43B63"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bc-java:1.31:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "232A9D64-5D09-4C97-A40C-AC7BCBFAC656"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bc-java:1.32:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1DCFFFEC-C0FA-43F9-8D51-281D2687A112"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bc-java:1.33:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "19E0BE43-463C-4181-B391-BF4365B85B96"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bc-java:1.34:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DAA2A9CD-697A-448B-BC5B-1B5C62EAC8F7"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bc-java:1.35:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "557535DF-E017-4B5D-BF31-108842792600"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bc-java:1.36:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AF066A80-84B8-40FF-9A48-D72D5475DEEA"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0A91B639-B1FE-4794-845C-31D614B6EB2A",
"versionEndIncluding": "1.35"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AEE7175F-DC6C-4555-B9E0-0FCA0B86B826"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.01:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E6019D20-B7C5-45E9-80A9-EF6A484E2307"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.02:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F74E7270-0289-4967-A291-5A03053CB68A"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.03:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BA120555-B228-471C-B00A-01F2D5144FD1"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AA3B4F44-B349-43A3-801F-38FCB53838E4"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.04:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A06BA9F6-30E4-4141-A995-A0F63ABF9D25"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.05:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD5FEAE4-3792-4778-A199-CAEA59A66068"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.06:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1FB8FAE6-C6DA-456C-839D-A241493F54D1"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.07:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "85BDABE2-E5A5-453C-B1EF-66EA5001191B"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.08:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "083BB632-3482-4D99-9515-7D3969FA5577"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.09:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "79EB74F9-E4A0-4C3F-9CCC-2157A8DD7EDE"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "80AE1A3C-4A65-4C49-9C92-B196AF6EBFD6"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B43C3258-E651-4595-83D0-1E370DA2A969"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "15899226-AE31-49B3-9C66-78E85FC4B628"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A0221377-D94B-4FAD-BAC9-C7179A4D355D"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B2EA98CD-0647-4C0C-B33B-55EEC218D69A"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.16:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8CC3C505-D136-4218-88E4-A89DE05E372D"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.17:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3D3DB77B-8E44-4A11-97C8-F4736C40EA72"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.18:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "35DB68BA-906A-4B58-B93B-59E237A2DFB8"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.19:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "423494D6-B192-4182-8B6E-AD6BB8E0DED9"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D05202FC-AC0B-4F66-BEBA-E8C1D650D9A8"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E9BE90FD-346A-4E1C-A768-333000ACE323"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.22:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "393BCDA6-ED42-4173-8022-2CD1487EF004"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.23:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5F8237FE-937B-41AD-AB1B-8331FF409550"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.24:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9333C3E7-0050-4AB5-83FC-E683CCCAF614"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.25:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "45EACB03-5B75-49D4-A24D-4117045BBE53"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.26:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7483646A-B9B4-4D14-BF02-900A1405F1FD"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.27:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D7BE8753-AA5A-4B71-96C4-D0F30F0FDF04"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.28:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A8967308-CB4F-47AB-8761-A8AC27247D17"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.29:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "46FD4731-2314-465F-B9D7-CC907EC8CE42"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.30:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5E50EB43-2389-4D6C-BAFA-2B024F521FAC"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.32:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D8FBEB87-300E-4245-867D-3CC79163B941"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.33:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E48550BA-18A0-4682-9F83-71B8294FEC4A"
},
{
"criteria": "cpe:2.3:a:bouncycastle:bouncy-castle-crypto-package:1.34:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B462DAC1-4037-468F-897B-05CDFAFA4DB3"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "cve@mitre.org"
}