CVE-2020-35169

Critical

Description

Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.5.2, contain an Improper Input Validation Vulnerability.

SeverityCritical
CVSS9.1
Exploit probability—
ProductDell Bsafe Crypto-c-micro-edition
PublishedJul 11, 2022
First seenJul 11, 2022
Weakness typeCWE-347CWE-347

How to fix

Update
  • dell bsafe_crypto-c-micro-edition4.1.5 or later
  • dell bsafe_micro-edition-suite4.5.2 or later

Affected products

ProductAffected versionsFixed in
dell bsafe_crypto-c-micro-editionv < 4.1.54.1.5
dell bsafe_micro-edition-suitev < 4.5.24.5.2
oracle database12.1.0.2, 19c, 21c—
oracle http_server12.2.1.3.0, 12.2.1.4.0—
oracle security_service12.2.1.3.0, 12.2.1.4.0—
oracle weblogic_server_proxy_plug-in12.2.1.3.0, 12.2.1.4.0—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2020-35169 · Dell Bsafe Crypto-c-micro-edition · Dark Radar