Known vulnerabilities in Bouncy Castle for Java 1.27

Version: 1.27
Software CPE: cpe:2.3:a:legion_of_the_bouncy_castle:bc-java:*:*:*:*:*:*:*:*
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Bouncy Castle for Java version 1.27 Bouncy Castle for Java 1.27 is affected by 9 vulnerabilities: 8 medium, 1 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121014 - Resource exhaustion
CVE-2025-8885
CWE-400 Medium
No
No
1.78 07.01.2026 SB2024050731
SB2026010745
SB2026010827
and 10 more
#VU89221 - Insufficient Verification of Data Authenticity
CVE-2024-34447
CWE-345 Medium
No
No
1.78 07.05.2024 SB2024050731
SB2024070445
SB2024071844
and 15 more
#VU89220 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-30172
CWE-835 Medium
No
No
1.78 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 62 more
#VU89219 - Observable discrepancy
CVE-2024-30171
CWE-203 Medium
No
No
1.78 07.05.2024 SB2024050731
SB2024050734
SB2024061019
and 59 more
#VU89218 - Resource exhaustion
CVE-2024-29857
CWE-400 Medium
No
No
1.78 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 69 more
#VU85874 - Resource exhaustion
CVE-2023-33202
CWE-400 Medium
No
No
1.73 29.01.2024 SB2024012929
SB2024012930
SB2024013106
and 19 more
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201
CWE-90 Medium
No
No
1.74 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more
#VU55035 - Information Exposure Through Timing Discrepancy
CVE-2020-15522
CWE-208 Medium
No
No
1.66 20.07.2021 SB2021072033
SB2021062601
SB2022062815
and 11 more
#VU11223 - Permissions, Privileges, and Access Controls
CVE-2018-5382
CWE-264 Low
No
No
- 22.03.2018 SB2018032205