Vulnerability record · CVE-2015-0534 · published 20 August 2015

CVE-2015-0534: Dell bsafe improper certificate validation vulnerability

Dell · Bsafe

EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3, RSA BSAFE Crypto-J before 6.2, RSA BSAFE SSL-J before 6.2, and RSA BSAFE SSL-C 2.8.9 and earlier do not enforce certain constraints on certificate data, which allows remote attackers to defeat a fingerprint-based certificate-blacklist protection mechanism by including crafted data within a certificate's unsigned portion, a similar issue to CVE-2014-8275.

7.5 CVSS 3.1 High EPSS 1.4% · top 28.3% CWE-295 · Improper certificate validation

7.5CVSS 3.1 base score, v2 5.0

1.4%EPSS exploitation probability, 30 days

NoNot in CISA KEV

3Affected product versions listed by NVD

8References

17 Jun 2026Last modified by NVD

Description

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Bsafe Dell

Bsafe Ssl C Dell

Bsafe Ssl J Dell

References

Link	Tags
http://seclists.org/bugtraq/2015/Aug/84	Mailing ListThird Party Advisory
http://www.securityfocus.com/bid/76377	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1033297	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1033298	Third Party AdvisoryVDB Entry
http://seclists.org/bugtraq/2015/Aug/84	Mailing ListThird Party Advisory
http://www.securityfocus.com/bid/76377	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1033297	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1033298	Third Party AdvisoryVDB Entry

Track CVE-2015-0534 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2022-34381Dell bsafe ssl-j vulnerabilityDell BSAFE SSL-J version 7.0 and all versions prior to 6.5, and Dell BSAFE Crypto-J versions prior to 6.2.6.1 contain an unmaintained third-party com…EPSS 0.98%2 Feb 2024 9.8CVE-2018-11058Dell bsafe out-of-bounds read vulnerabilityRSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition, version prior…EPSS 4.0%14 Sep 2018 9.8CVE-2015-0537Dell bsafe vulnerabilityInteger underflow in the base64-decoding implementation in EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3, RSA BSA…EPSS 2.6%20 Aug 2015 7.5CVE-2024-29171Dell bsafe ssl-j improper certificate validation vulnerabilityDell BSAFE SSL-J, versions prior to 6.6 and versions 7.0 through 7.2, contains an Improper certificate verification vulnerability. A remote attacker …EPSS 0.33%12 Feb 2025 7.5CVE-2024-29172Dell bsafe ssl-j vulnerabilityDell BSAFE SSL-J, versions prior to 6.6 and versions 7.0 through 7.2, contains a deadlock vulnerability. A remote attacker could potentially exploit …EPSS 0.45%12 Feb 2025 7.5CVE-2022-24409Dell bsafe ssl-j vulnerabilityDell BSAFE SSL-J contains remediation for a covert timing channel vulnerability that may be exploited by malicious users to compromise the affected s…EPSS 0.96%23 Feb 2022 7.5CVE-2018-15769Dell bsafe vulnerabilityRSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in 4.0.x series) and versions prior to 4.1.6.2 (in 4.1.x series) contain a key management err…EPSS 2.7%16 Nov 2018 7.5CVE-2018-11054Dell bsafe integer overflow vulnerabilityRSA BSAFE Micro Edition Suite, version 4.1.6, contains an integer overflow vulnerability. A remote attacker could use maliciously constructed ASN.1 d…EPSS 3.2%31 Aug 2018

Source: NIST National Vulnerability Database (record CVE-2015-0534), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.