VDB
CVE-2025-9340
CVE-2025-9340
PUBLISHED
CVSS 8.699999809265137 HIGH
Bouncy Castle ist eine Kryptographie-API für Java.
EPSS 0.18% · 7.2th percentile
Risk Scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.18%
7.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Open Source | Open Source Bouncy Castle <2.73.8 | |
| Open Source | Open Source Bouncy Castle <2.1.1 |
Timeline
- Aug 21, 2025 CVE Published
- Aug 22, 2025 EPSS Score
- Aug 30, 2025 EPSS Score
- Sep 8, 2025 EPSS Score
- Sep 16, 2025 EPSS Score
- Sep 24, 2025 EPSS Score
- Oct 3, 2025 EPSS Score
- Oct 11, 2025 EPSS Score
- Oct 19, 2025 EPSS Score
- Oct 28, 2025 EPSS Score
- Nov 5, 2025 EPSS Score
- Nov 13, 2025 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1895.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1895 advisory
- https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902025%E2%80%909340 advisory
- https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902025%E2%80%909341 advisory