Search for vulnerabilities
Vulnerability details: VCID-zpn3-pbry-7fer
Vulnerability ID VCID-zpn3-pbry-7fer
Aliases CVE-2007-6721
GHSA-m26p-m559-g5j5
Summary Legion of the Bouncy Castle Java Cryptography API Bleichenbacher Oracle Vulnerability The Legion of the Bouncy Castle Java Cryptography API before release 1.38, as used in Crypto Provider Package before 1.36, has unknown impact and remote attack vectors related to "a Bleichenbacher vulnerability in simple RSA CMS signatures without signed attributes."
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (1)
System Score Found at
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2007-6721
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2007-6721
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2007-6721
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2007-6721
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2007-6721
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2007-6721
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2007-6721
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2007-6721
epss 0.00711 https://api.first.org/data/v1/epss?cve=CVE-2007-6721
epss 0.00743 https://api.first.org/data/v1/epss?cve=CVE-2007-6721
epss 0.00743 https://api.first.org/data/v1/epss?cve=CVE-2007-6721
epss 0.00743 https://api.first.org/data/v1/epss?cve=CVE-2007-6721
epss 0.00743 https://api.first.org/data/v1/epss?cve=CVE-2007-6721
epss 0.00743 https://api.first.org/data/v1/epss?cve=CVE-2007-6721
epss 0.00743 https://api.first.org/data/v1/epss?cve=CVE-2007-6721
epss 0.00743 https://api.first.org/data/v1/epss?cve=CVE-2007-6721
epss 0.00743 https://api.first.org/data/v1/epss?cve=CVE-2007-6721
epss 0.00743 https://api.first.org/data/v1/epss?cve=CVE-2007-6721
epss 0.00743 https://api.first.org/data/v1/epss?cve=CVE-2007-6721
epss 0.00743 https://api.first.org/data/v1/epss?cve=CVE-2007-6721
epss 0.00743 https://api.first.org/data/v1/epss?cve=CVE-2007-6721
epss 0.00743 https://api.first.org/data/v1/epss?cve=CVE-2007-6721
epss 0.00743 https://api.first.org/data/v1/epss?cve=CVE-2007-6721
epss 0.00743 https://api.first.org/data/v1/epss?cve=CVE-2007-6721
epss 0.00743 https://api.first.org/data/v1/epss?cve=CVE-2007-6721
epss 0.00743 https://api.first.org/data/v1/epss?cve=CVE-2007-6721
epss 0.00743 https://api.first.org/data/v1/epss?cve=CVE-2007-6721
epss 0.00743 https://api.first.org/data/v1/epss?cve=CVE-2007-6721
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-m26p-m559-g5j5
generic_textual HIGH https://github.com/bcgit/bc-java
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2007-6721
generic_textual HIGH https://web.archive.org/web/20071022023551/http://www.bouncycastle.org/csharp
generic_textual HIGH https://web.archive.org/web/20080316202318/http://www.bouncycastle.org:80/releasenotes.html
generic_textual HIGH http://www.bouncycastle.org/devmailarchive/msg08195.html
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.7139
EPSS Score 0.00711
Published At Sept. 9, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T09:12:00.137295+00:00 GithubOSV Importer Import https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-m26p-m559-g5j5/GHSA-m26p-m559-g5j5.json 37.0.0