CVE-2016-2850

HIGH · CVSS 7.5 EPSS 2.12%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-05-13 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2016-2850

Severity

HIGH

CVSS

7.5

EPSS

2.12%

Original NVD Description

Botan 1.11.x before 1.11.29 does not enforce TLS policy for (1) signature algorithms and (2) ECC curves, which allows remote attackers to conduct downgrade attacks via unspecified vectors.