$ cve CVE-2018-11058 JSON

CVE-2018-11058

9.8

CRITICAL · CVSS 3.1 · EPSS 4% (pctl 90)

In your normal cycle

Critical by CVSS (9.8), but no sign of active exploitation.

Description

RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition, version prior to 4.0.5.3 (in 4.0.x) contain a Buffer Over-Read vulnerability when parsing ASN.1 data. A remote attacker could use maliciously constructed ASN.1 data that would result in such issue.

Scoring

CVSS	9.8 (CRITICAL, v3.1)
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS	4.01% — more likely to be exploited than 90% of all CVEs
Weakness	CWE-125
On CISA KEV	no
Public exploit	none known
Published	2018-09-14
Last modified	2026-06-17

Affected (13)

Vendor	Product
dell	bsafe
dell	bsafe crypto-c
oracle	application testing suite
oracle	communications analytics
oracle	communications ip service activator
oracle	core rdbms
oracle	enterprise manager ops center
oracle	goldengate application adapters
oracle	jd edwards enterpriseone tools
oracle	real user experience insight
oracle	retail predictive application server
oracle	security service
oracle	timesten in-memory database

References

→ the Explorer · watch your stack · NVD