VULNERABILITY INTELLIGENCE

CVE-2007-6721

CVSS score10 HIGH
EPSS probability2.41%
CISA KEVNot currently listed
Published2009-03-30
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes."

Primary references