Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Medium4.3The ssl3_get_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8zd, 1.0.0 before 1.0.0p, and 1.0.1 before 1.0.1k allows remote SSL servers to conduct RSA-to-EXPORT_RSA downgCVE-2015-0204 · openssl · openssl · CVE.org · FIRST EPSS · NIST NVD · Debian, OpenSSLEPSS 98.7%Jan 9, 2015
High7.5OpenSSL Information Disclosure VulnerabilityCVE-2014-0160 · openssl · openssl · CISA KEV · CVE.org · FIRST EPSS · Mitel, OpenSSLKEVEPSS 100.0%Apr 7, 2014