3dcore-lib (=0.17.9), 42-cli (>=1.0.0 <=1.0.4) +2735 more potentially affected by CVE-2020-28498 via elliptic (>=0.10.2 <=6.5.3)

🗓️ 08 Mar 2021 16:06:50Reported by Vulners OSVType

CVE-2020-28498 via elliptic affects packages through transitive dependencies, including three d core lib and forty two cli.

Reporter	Title	Published	Views	Family All 25
IBM Security Bulletins	Security Bulletin: Critical Vulnerabilities in libraries used by libraries that IBM Spectrum discover is using (libraries of libraries)	28 Mar 202216:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Node.js affect IBM Cloud Pak System	17 Aug 202209:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Machine Learning Accelerator on Cloud Pak for Data is vulnerable to multiple vulnerabilities	12 Dec 202317:28	–	ibm
IBM Security Bulletins	Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale Management GUI and/or system health monitoring are now fixed in 5.2.3.7 or higher and 6.0.0.2 or higher	2 Apr 202622:00	–	ibm
IBM Security Bulletins	Security Bulletin: Node.js as used by IBM Security QRadar Analyst Workflow App for IBM QRadar SIEM is vulnerable to multiple vulnerabilities	24 May 202218:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar User Behavior Analytics is vulnerable to components with known vulnerabilities	31 Aug 202310:37	–	ibm
Circl	CVE-2020-28498	2 Feb 202122:39	–	circl
CNNVD	Indutny Elliptic Encryption Problem Vulnerability	2 Feb 202100:00	–	cnnvd
CVE	CVE-2020-28498	2 Feb 202118:50	–	cve
Cvelist	CVE-2020-28498 Cryptographic Issues	2 Feb 202118:50	–	cvelist

14 Jan 2025 08:57Current

6.8Medium risk

Vulners AI Score6.8

CVSS 24.3

CVSS 3.16.8

EPSS0.01245