CVE-2018-15769
Status: ModifiedHigh (7.5)—
RSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in 4.0.x series) and versions prior to 4.1.6.2 (in 4.1.x series) contain a key management error issue. A malicious TLS server could potentially cause a Denial Of Service (DoS) on TLS clients during the handshake when a very large prime value is sent to the TLS client, and an Ephemeral or Anonymous Diffie-Hellman cipher suite (DHE or ADH) is used.
CVSS
- Version: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Base score: 7.5
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 2.65%
- Percentile among all scored CVEs: 85
- Score date: 10/6/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (12)
Dell — BsafeOracle — Application Testing SuiteOracle — Communications AnalyticsOracle — Communications IP Service ActivatorOracle — Core RdbmsOracle — Enterprise Manager OPS CenterOracle — Goldengate Application AdaptersOracle — JD Edwards Enterpriseone ToolsOracle — Real User Experience InsightOracle — Retail Predictive Application ServerOracle — Security ServiceOracle — Timesten In-memory Database
CWEs
- NVD-CWE-noinfo
References
- http://www.securityfocus.com/bid/105929
- http://www.securitytracker.com/id/1042057
- https://seclists.org/fulldisclosure/2018/Nov/37
- https://www.oracle.com/security-alerts/cpuapr2020.html
- https://www.oracle.com/security-alerts/cpujan2020.html
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://www.oracle.com/security-alerts/cpuoct2020.html
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
- http://www.securityfocus.com/bid/105929
- http://www.securitytracker.com/id/1042057
- https://seclists.org/fulldisclosure/2018/Nov/37
- https://www.oracle.com/security-alerts/cpuapr2020.html
- https://www.oracle.com/security-alerts/cpujan2020.html
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://www.oracle.com/security-alerts/cpuoct2020.html
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
Raw JSON (NVD)
Show
{
"id": "CVE-2018-15769",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.5,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "security_alert@emc.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2018-11-16T21:29:00.470",
"references": [
{
"url": "http://www.securityfocus.com/bid/105929",
"tags": [
"Broken Link"
],
"source": "security_alert@emc.com"
},
{
"url": "http://www.securitytracker.com/id/1042057",
"tags": [
"Broken Link"
],
"source": "security_alert@emc.com"
},
{
"url": "https://seclists.org/fulldisclosure/2018/Nov/37",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"source": "security_alert@emc.com"
},
{
"url": "https://www.oracle.com/security-alerts/cpuapr2020.html",
"tags": [
"Patch",
"Third Party Advisory"
],
"source": "security_alert@emc.com"
},
{
"url": "https://www.oracle.com/security-alerts/cpujan2020.html",
"tags": [
"Patch",
"Third Party Advisory"
],
"source": "security_alert@emc.com"
},
{
"url": "https://www.oracle.com/security-alerts/cpujul2020.html",
"tags": [
"Patch",
"Third Party Advisory"
],
"source": "security_alert@emc.com"
},
{
"url": "https://www.oracle.com/security-alerts/cpuoct2020.html",
"tags": [
"Patch",
"Third Party Advisory"
],
"source": "security_alert@emc.com"
},
{
"url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"tags": [
"Patch",
"Third Party Advisory"
],
"source": "security_alert@emc.com"
},
{
"url": "http://www.securityfocus.com/bid/105929",
"tags": [
"Broken Link"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id/1042057",
"tags": [
"Broken Link"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://seclists.org/fulldisclosure/2018/Nov/37",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.oracle.com/security-alerts/cpuapr2020.html",
"tags": [
"Patch",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.oracle.com/security-alerts/cpujan2020.html",
"tags": [
"Patch",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.oracle.com/security-alerts/cpujul2020.html",
"tags": [
"Patch",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.oracle.com/security-alerts/cpuoct2020.html",
"tags": [
"Patch",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html",
"tags": [
"Patch",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "RSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in 4.0.x series) and versions prior to 4.1.6.2 (in 4.1.x series) contain a key management error issue. A malicious TLS server could potentially cause a Denial Of Service (DoS) on TLS clients during the handshake when a very large prime value is sent to the TLS client, and an Ephemeral or Anonymous Diffie-Hellman cipher suite (DHE or ADH) is used."
},
{
"lang": "es",
"value": "RSA BSAFE Micro Edition Suite en versiones anteriores a la 4.0.11 (en la serie 4.0.x) y las versiones anteriores a la 4.1.6.2 (en la serie 4.1.x) contiene un problema de error de gestión clave. Un servidor TLS malicioso podría provocar una denegación de servicio (DoS) en los clientes TLS durante la negociación cuando un valor primo muy grande se envía al cliente TLS y se emplea una suite de cifrado Diffie-Hellman Ephemeral o Anonymous (DHE o ADH)."
}
],
"lastModified": "2026-06-17T01:43:05.310",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:dell:bsafe:*:*:*:*:micro_edition_suite:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3F58C7A1-2DC4-4971-BCB5-1F7D4A152519",
"versionEndExcluding": "4.0.11",
"versionStartIncluding": "4.0.0"
},
{
"criteria": "cpe:2.3:a:dell:bsafe:*:*:*:*:micro_edition_suite:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F72D69C9-BBFA-43CC-A094-596361593D16",
"versionEndExcluding": "4.1.6.2",
"versionStartIncluding": "4.1.0"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A125E817-F974-4509-872C-B71933F42AD1"
},
{
"criteria": "cpe:2.3:a:oracle:communications_analytics:12.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "55D98C27-734F-490B-92D5-251805C841B9"
},
{
"criteria": "cpe:2.3:a:oracle:communications_ip_service_activator:7.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DE48E0FE-5931-441C-B4FF-253BD9C48186"
},
{
"criteria": "cpe:2.3:a:oracle:communications_ip_service_activator:7.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DE7A60DB-A287-4E61-8131-B6314007191B"
},
{
"criteria": "cpe:2.3:a:oracle:core_rdbms:11.2.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E1367C5D-8815-41E6-B609-E855CB8B1AA7"
},
{
"criteria": "cpe:2.3:a:oracle:core_rdbms:12.1.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7E150F02-5B34-4496-A024-335DF64D7F8F"
},
{
"criteria": "cpe:2.3:a:oracle:core_rdbms:12.2.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4059F859-A7D8-4ADD-93EE-74AF082ED34A"
},
{
"criteria": "cpe:2.3:a:oracle:core_rdbms:18c:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C9FFAF8E-4023-4599-9F0D-274E6517CB1B"
},
{
"criteria": "cpe:2.3:a:oracle:core_rdbms:19c:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9B639209-A651-43FB-8F0C-B25F605521EC"
},
{
"criteria": "cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AB654DFA-FEF9-4D00-ADB0-F3F2B6ACF13E"
},
{
"criteria": "cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "37209C6F-EF99-4D21-9608-B3A06D283D24"
},
{
"criteria": "cpe:2.3:a:oracle:goldengate_application_adapters:12.3.2.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F6F259E6-10A8-4207-8FC2-85ABD70B04C0"
},
{
"criteria": "cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "41684398-18A4-4DC6-B8A2-3EBAA0CBF9A6"
},
{
"criteria": "cpe:2.3:a:oracle:real_user_experience_insight:13.1.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0B1BE63E-7E2E-407C-92F3-664D7C5680C8"
},
{
"criteria": "cpe:2.3:a:oracle:real_user_experience_insight:13.2.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F4044230-5BF5-4B13-A853-E59D5592ADC6"
},
{
"criteria": "cpe:2.3:a:oracle:real_user_experience_insight:13.3.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B534B112-9BA4-467B-A58B-D89C0A6EFA9C"
},
{
"criteria": "cpe:2.3:a:oracle:retail_predictive_application_server:15.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "24A3C819-5151-4543-A5C6-998C9387C8A2"
},
{
"criteria": "cpe:2.3:a:oracle:retail_predictive_application_server:16.0.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "924AFE2D-D1BB-4026-9C12-BA379F8C5BEA"
},
{
"criteria": "cpe:2.3:a:oracle:security_service:11.1.1.9.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "008518E5-4814-46AA-B9E7-A3B2635D6D4B"
},
{
"criteria": "cpe:2.3:a:oracle:security_service:12.1.3.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "495ADD0F-AF15-495D-8E07-171CCF71DBD3"
},
{
"criteria": "cpe:2.3:a:oracle:security_service:12.2.1.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9FD166F7-8A83-4BC7-A392-E830E87F841B"
},
{
"criteria": "cpe:2.3:a:oracle:timesten_in-memory_database:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A6DA0527-562D-457F-A2BB-3DF5EAABA1AB",
"versionEndExcluding": "18.1.4.1.0"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "security_alert@emc.com"
}