polarssl polarssl

Name: polarssl polarssl
Brand: polarssl

productUS

cpe:2.3:a:polarssl:polarssl:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical4high9medium1low

updated 2026-10-28

vulnerabilities (15)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2013-0169US	low2.6	35.6% (98th)	Exploit	no fix	2013-02-08	17 versions
CVE-2015-5291US	medium6.8	3.66% (90th)	—	1.2.17	2015-11-02	1.0.0 → 1.2.17
CVE-2015-1182US	high7.5	3.10% (88th)	—	no fix	2015-01-27	33 versions
CVE-2013-5914US	medium6.8	3.00% (87th)	—	no fix	2013-10-26	9 versions
CVE-2015-8036US	medium6.8	2.89% (87th)	—	no fix	2015-11-02	≤ 1.2.17
CVE-2014-4911US	medium5.0	2.43% (84th)	—	no fix	2014-07-22	19 versions
CVE-2012-2130US	high7.4	2.20% (82nd)	—	no fix	2019-12-06	2 versions
CVE-2013-5915US	medium4.3	2.14% (82nd)	—	no fix	2013-10-04	29 versions
CVE-2014-8627US	medium5.0	2.09% (82nd)	—	no fix	2014-11-24	= 1.3.8
CVE-2013-1621US	medium4.3	2.07% (81st)	—	no fix	2013-02-08	23 versions
CVE-2014-9744US	high7.8	2.04% (81st)	—	no fix	2015-08-24	≤ 1.3.8
CVE-2013-4623US	medium4.3	1.89% (79th)	—	no fix	2013-09-30	15 versions
CVE-2014-8628US	high7.8	1.72% (77th)	—	no fix	2015-08-24	10 versions
CVE-2011-1923US	medium4.0	1.29% (70th)	—	no fix	2012-06-20	8 versions
CVE-2011-4574US	critical9.8	1.09% (65th)	—	1.1.0	2021-10-27	< 1.1.0

The flaw types (CWEs) most of these CVEs share.

CWE-310CWE-3105 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-326Inadequate Encryption Strength2 CVEs
CWE-399CWE-3992 CVEs
CWE-331Insufficient Entropy1 CVEs
CWE-338Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)1 CVEs
CWE-457Use of Uninitialized Variable1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.