CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.5. It affects Exchange, Oracle, Java. Public exploit code or proof-of-concept references have been detected in its references. Its EPSS score suggests a 24.3% probability of exploitation in the next 30 days.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
BouncyCastle TLS prior to version 1.0.3, when configured to use the JCE (Java Cryptography Extension) for cryptographic functions, provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover the private key from a vulnerable application. This vulnerability is referred to as "ROBOT."
Related CVEs
Other vulnerabilities affecting the same vendor(s)