[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ftqIAkVt81nzXqny6VUWwZXo2R8cVuVptxiuR_Z9zTfg":3,"g5a-ex:oracle\u002Fsecurity_service@*":123,"g5a-family:oracle\u002Fsecurity_service":125},{"success":4,"data":5},true,{"product":6,"versions":34,"topVulnerabilitiesByEpss":41,"kevVulnerabilities":100,"seoMetadata":101,"meta":120},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":33},"oracle","security_service",6,22,0,"2022-07-11",[14,18,21,24,27,30],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"11.1.1.9.0",10,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"12.1.3.0",1,{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},"12.1.3.0.0",8,{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},"12.2.1.2.0",2,{"version":28,"cve_count":29,"kev_count":11,"has_kev":17},"12.2.1.3.0",18,{"version":31,"cve_count":32,"kev_count":11,"has_kev":17},"12.2.1.4.0",13,"Security Service by Oracle is a technology product with 6 tracked versions and 22 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[35,36,37,38,39,40],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},{"version":28,"cve_count":29,"kev_count":11,"has_kev":17},{"version":31,"cve_count":32,"kev_count":11,"has_kev":17},[42,50,58,63,68,73,79,84,91,96],{"cveId":43,"description":44,"publishedDate":45,"cvssScore":46,"cvssVersion":47,"severity":48,"isKev":17,"epssScore":49},"CVE-2018-11058","RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition, version prior to 4.0.5.3 (in 4.0.x) contain a Buffer Over-Read vulnerability when parsing ASN.1 data. A remote attacker could use maliciously constructed ASN.1 data that would result in such issue.","2018-09-14",9.8,"v3.1","Critical",0.04012,{"cveId":51,"description":52,"publishedDate":53,"cvssScore":54,"cvssVersion":55,"severity":56,"isKev":17,"epssScore":57},"CVE-2018-2765","Vulnerability in the Oracle Security Service component of Oracle Fusion Middleware (subcomponent: Oracle SSL API). Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Security Service. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Security Service accessible data. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N).","2018-04-19",7.5,"v3.0","High",0.03307,{"cveId":59,"description":60,"publishedDate":61,"cvssScore":54,"cvssVersion":47,"severity":56,"isKev":17,"epssScore":62},"CVE-2018-11054","RSA BSAFE Micro Edition Suite, version 4.1.6, contains an integer overflow vulnerability. A remote attacker could use maliciously constructed ASN.1 data to potentially cause a Denial Of Service.","2018-08-31",0.03235,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":54,"cvssVersion":47,"severity":56,"isKev":17,"epssScore":67},"CVE-2018-15769","RSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in 4.0.x series) and versions prior to 4.1.6.2 (in 4.1.x series) contain a key management error issue. A malicious TLS server could potentially cause a Denial Of Service (DoS) on TLS clients during the handshake when a very large prime value is sent to the TLS client, and an Ephemeral or Anonymous Diffie-Hellman cipher suite (DHE or ADH) is used.","2018-11-16",0.0265,{"cveId":69,"description":70,"publishedDate":71,"cvssScore":54,"cvssVersion":47,"severity":56,"isKev":17,"epssScore":72},"CVE-2020-5360","Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to a Buffer Under-Read Vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability resulting in undefined behaviour, or a crash of the affected systems.","2020-12-16",0.02233,{"cveId":74,"description":75,"publishedDate":61,"cvssScore":76,"cvssVersion":47,"severity":77,"isKev":17,"epssScore":78},"CVE-2018-11056","RSA BSAFE Micro Edition Suite, prior to 4.1.6.1 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.3 (in 4.0.x) contain an Uncontrolled Resource Consumption ('Resource Exhaustion') vulnerability when parsing ASN.1 data. A remote attacker could use maliciously constructed ASN.1 data that would exhaust the stack, potentially causing a Denial Of Service.",6.5,"Medium",0.01869,{"cveId":80,"description":81,"publishedDate":61,"cvssScore":82,"cvssVersion":47,"severity":77,"isKev":17,"epssScore":83},"CVE-2018-11057","RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x) contains a Covert Timing Channel vulnerability during RSA decryption, also known as a Bleichenbacher attack on RSA decryption. A remote attacker may be able to recover a RSA key.",5.9,0.01666,{"cveId":85,"description":86,"publishedDate":87,"cvssScore":88,"cvssVersion":55,"severity":89,"isKev":17,"epssScore":90},"CVE-2017-10166","Vulnerability in the Oracle Security Service component of Oracle Fusion Middleware (subcomponent: C Oracle SSL API). Supported versions that are affected are FMW: 11.1.1.9.0 and 12.1.3.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Security Service. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Security Service accessible data. CVSS 3.0 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N).","2017-10-19",3.7,"Low",0.01471,{"cveId":92,"description":93,"publishedDate":94,"cvssScore":82,"cvssVersion":47,"severity":77,"isKev":17,"epssScore":95},"CVE-2020-14530","Vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: None). The supported version that is affected is 11.1.1.9.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Security Service. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Security Service accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N).","2020-07-15",0.01288,{"cveId":97,"description":98,"publishedDate":12,"cvssScore":46,"cvssVersion":47,"severity":48,"isKev":17,"epssScore":99},"CVE-2020-29508","Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Improper Input Validation Vulnerability.",0.01174,[],{"title":102,"metaDescription":103,"keywords":104,"structuredData":105},"Security Service by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Security Service by Oracle covering 6 versions with 22 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Security Service vulnerabilities, Security Service security, Security Service CVE, Oracle Security Service, Security Service threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":106,"@type":107,"name":108,"description":103,"url":109,"manufacturer":110,"applicationCategory":114,"softwareVersion":115,"mainEntity":116},"https:\u002F\u002Fschema.org","SoftwareApplication","Security Service","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fsecurity_service",{"@type":111,"name":112,"url":113},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","6 versions tracked",{"@type":117,"name":118,"description":119,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Security Service Security Vulnerabilities","Security vulnerabilities affecting Security Service by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":121,"apiVersion":122},"2026-10-17T20:34:36.049Z","3.0",{"rows":124,"total":11,"capped":17,"failed":11},[],[126],{"product":127,"cves":20},"security_service_fmw"]