CVE-2007-6721
The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes."
- EPSS
- 2.4% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- bouncycastle:bc-java
- bouncycastle:bouncy-castle-crypto-package
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-m26p-m559-g5j5 | Maven | bouncycastle:bcprov-jdk14 | <1.38 | 1.38 |
| GHSA-m26p-m559-g5j5 | Maven | bouncycastle:bcprov-jdk15 | <1.38 | 1.38 |
| GHSA-m26p-m559-g5j5 | Maven | bouncycastle:bcprov-jdk16 | <1.38 | 1.38 |