EUVD-2021-0779

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Sensitive data leak in Bouncy Castle due to OAEP Decoder error handling for invalid ciphertexts

Reporter	Title	Published	Views	Family All 40
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana is affected by Multiple Security Vulnerabilities	31 Mar 202413:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in The Bouncy Castle Crypto Package For Java affect IBM Application Performance Management products	25 Sep 202309:11	–	ibm
IBM Security Bulletins	Security Bulletin: App Connect Professional is affected by Bouncy Castle vulnerability.	14 Dec 202111:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.5.0 fixes multiple security vulnerabilities	20 Jun 202308:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerability issues affect IBM Spectrum Conductor 2.5.0	20 Feb 202106:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling File Gateway is vulnerable to multiple issues due to Bouncy Castle	14 Oct 202221:58	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Bouncy Castle, Eclipse JGit and Node.js diff might affect IBM Storage Defender Copy Data Management	26 Sep 202518:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities including a remote code execution in Spring Framework (CVE-2022-22965)	11 Apr 202215:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities addressed in Cloudera Base on premises Cloudera Runtime 7.3.1.700 SP3 CHF 2	9 Mar 202617:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by a Bouncy Castle vulnerability (CVE-2020-26939)	3 Nov 202115:37	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "bcef72a5-9e8f-38f1-822e-1061785be2e4",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "a4255e81-53c7-3d1f-8e64-d2d96377a354",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-26939
github	www.github.com/bcgit/bc-java/commit/930f8b274c4f1f3a46e68b5441f1e7fadb57e8c1
github	www.github.com/bcgit/bc-java/wiki/CVE-2020-26939
lists	www.lists.apache.org/thread.html/r8c36ba34e80e05eecb1f80071cc834d705616f315b634ec0c7d8f42e@%3Cissues.solr.apache.org%3E
lists	www.lists.debian.org/debian-lts-announce/2020/11/msg00007.html
security	www.security.netapp.com/advisory/ntap-20201202-0005
lists	www.lists.apache.org/thread.html/r8c36ba34e80e05eecb1f80071cc834d705616f315b634ec0c7d8f42e%40%3Cissues.solr.apache.org%3E
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.15.3

CVSS 25

EPSS0.02437