CWE-780: Use of RSA Algorithm without OAEP
Filter
The product uses the RSA algorithm but does not incorporate Optimal Asymmetric Encryption Padding (OAEP).
What the weakness is: CWE-780 at MITRE. OWASP Top 10: A04:2025 Cryptographic Failures
Ask an AI about CWE-780
Show the prompt
Explain CWE-780: Use of RSA Algorithm without OAEP and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/780.html and https://cve.bz/cve/cwe/780?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 2.3CVE-2025-9071EPSS 0.2%
Erroneously using an all-zero seed for RSA-OEAP padding instead of the generated random bytes, in Oberon microsystems AG’s Oberon PSA Crypto library in all versions up to 1.5.1, results in deterministic RSA and thus in a loss of confidenti…
- 5.9CVE-2024-51456EPSS 0.3%
IBM Robotic Process Automation 21.0.0 through 21.0.7.19 and 23.0.0 through 23.0.19 could allow a remote attacker to obtain sensitive data that may be exposed through certain crypto-analytic attacks.
- 5.8CVE-2022-40722EPSS 0.3%
A misconfiguration of RSA padding implemented in the PingID Adapter for PingFederate to support Offline MFA with PingID mobile authenticators is vulnerable to pre-computed dictionary attacks, leading to a bypass of offline MFA.