[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$frlA1j87vpB__WDFGhKPfR76WCNJ1fmEVyVj-4-WVYBI":3,"g5a-risk:CVE-2018-12404":144},{"success":4,"data":5,"meta":142},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":15,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":47,"references":48,"referencesCount":85,"weaknesses":86,"weaknessesCount":47,"isActivelyExploited":90,"cisaInfo":15,"otxData":15,"relatedBlogPosts":91,"seoMetadata":92,"configurations":117,"relatedVendorCves":126,"notableEvents":127},"CVE-2018-12404","What is CVE-2018-12404?","A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) and affects all NSS versions prior to NSS 3.41.","A cached side channel attack during handshakes using RSA encryption could allow for the decryption of encrypted content. This is a variant of the Adaptive Ch...","2019-05-02T17:29:01.677","2021-02-12T07:15:12.497",5.9,"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","HIGH","NONE","UNCHANGED","MEDIUM",2.2,3.6,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":26,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":26,"Authentication":24,"ConfidentialityImpact":34,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":35,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",4.3,8.6,2.9,0.44248,[38,38,38,38,38,38,38],"Medium",[42],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"mozilla","network_security_services","*","cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:*",1,[49,53,59,63,69,73,77,81],{"url":50,"source":51,"tags":52},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-07\u002Fmsg00021.html","Opensuse",[],{"url":54,"source":55,"tags":56},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F107260","Securityfocus",[57,58],"Third Party Advisory","VDB Entry",{"url":60,"source":61,"tags":62},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:2237","Red Hat",[],{"url":64,"source":65,"tags":66},"https:\u002F\u002Fbugzilla.mozilla.org\u002Fshow_bug.cgi?id=CVE-2018-12404","Mozilla",[67,58,68],"Issue Tracking","Vendor Advisory",{"url":70,"source":71,"tags":72},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fpdf\u002Fssa-379803.pdf","Siemens",[],{"url":74,"source":75,"tags":76},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2020\u002F09\u002Fmsg00029.html","Debian",[],{"url":78,"source":79,"tags":80},"https:\u002F\u002Fus-cert.cisa.gov\u002Fics\u002Fadvisories\u002Ficsa-21-040-04","CISA",[],{"url":82,"source":83,"tags":84},"https:\u002F\u002Fwww.oracle.com\u002Ftechnetwork\u002Fsecurity-advisory\u002Fcpuoct2019-5072832.html","Oracle",[],8,[87],{"id":88,"name":88,"description":89},"Unknown","NVD-CWE-noinfo",false,[],{"title":93,"metaDescription":94,"keywords":95,"canonicalUrl":96,"structuredData":97},"What is CVE-2018-12404? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-12404, a medium severity cyber security vulnerability from 2019. High exploit probability (44.2%). A cached side channel a...","CVE-2018-12404, CVE-2018-12404 vulnerability, CVE-2018-12404 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, mozilla security, network_security_services vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2018-12404",{"@context":98,"@type":99,"headline":93,"description":94,"datePublished":10,"dateModified":11,"author":100,"publisher":104,"about":108,"mainEntityOfPage":112,"articleSection":115,"keywords":116},"https:\u002F\u002Fschema.org","TechArticle",{"@type":101,"name":102,"url":103},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":101,"name":102,"url":103,"logo":105},{"@type":106,"url":107},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":109,"name":6,"description":110,"additionalType":111},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":113,"@id":114},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-12404","Cybersecurity","CVE-2018-12404, CVE-2018-12404 vulnerability, CVE-2018-12404 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[118],{"Operator":15,"Negate":15,"Nodes":119},[120],{"Operator":121,"Negate":15,"CPEMatch":122},"OR",[123],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":124,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":125,"VersionEndIncluding":15},"5F615818-61AD-43BF-A480-D5ED3C3567FD","3.41",[],[128,135],{"id":129,"eventType":130,"eventTime":131,"details":132,"label":133,"color":134},"e444b310-5659-4e17-af50-79b1b2f87824","LOW_EPSS_DELTA","2025-08-25T04:07:51.168901+00:00","Daily EPSS score decreased by 0.256 on 2023-12-30","EPSS Score Decreased","green",{"id":136,"eventType":137,"eventTime":138,"details":139,"label":140,"color":141},"187d8a3c-9bfc-4b31-9455-1542b216b48e","HIGH_EPSS_DELTA","2025-11-22T04:06:41.651237+00:00","Daily EPSS score increased by 0.193 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":143,"version":32},1792269450993,{"score":145,"band":146,"action":147,"scoredAt":148},38,"Low","Monitor","2026-10-16T06:46:04.634483+00:00"]