CVEDB API - Fast Vulnerability Dashboard

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-9970

jasypt before 1.9.2 allows a timing attack against the password hash comparison.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.01

EPSS Ranking 76.1%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2014-9970

Jasypt Project » Jasypt » Version: 1.4.1

cpe:2.3:a:jasypt_project:jasypt:1.4.1
Jasypt Project » Jasypt » Version: 1.5

cpe:2.3:a:jasypt_project:jasypt:1.5
Jasypt Project » Jasypt » Version: 1.6

cpe:2.3:a:jasypt_project:jasypt:1.6
Jasypt Project » Jasypt » Version: 1.7

cpe:2.3:a:jasypt_project:jasypt:1.7
Jasypt Project » Jasypt » Version: 1.7.1

cpe:2.3:a:jasypt_project:jasypt:1.7.1
Jasypt Project » Jasypt » Version: 1.8

cpe:2.3:a:jasypt_project:jasypt:1.8
Jasypt Project » Jasypt » Version: 1.9.0

cpe:2.3:a:jasypt_project:jasypt:1.9.0
Jasypt Project » Jasypt » Version: 1.9.1

cpe:2.3:a:jasypt_project:jasypt:1.9.1

Products

Pricing

Contact Us

support@shodan.io

Shodan ® - All rights reserved