Maven org.bouncycastle:bcprov-jdk15on

Name: Maven org.bouncycastle:bcprov-jdk15on
Brand: Maven

productUS

pkg:maven/org.bouncycastle/bcprov-jdk15on

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical8high11medium1low

updated 2026-10-28

vulnerabilities (25)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2017-13098US	medium5.9	24.3% (98th)	Exploit	1.0.3	2017-12-13	< 1.0.3
CVE-2020-28052US	high8.1	7.22% (94th)	Exploit	1.67	2020-12-18	1.65 → 1.67
CVE-2018-1000613US	critical9.8	4.77% (92nd)	—	1.60	2018-07-09	1.57 → 1.60
CVE-2015-7940US	medium5.0	4.69% (92nd)	—	1.51	2015-11-09	< 1.51
CVE-2018-1000180US	high7.5OT elevated	3.42% (89th)	—	1.60	2018-06-05	< 1.60
CVE-2016-1000343US	high7.5	3.25% (88th)	—	1.56	2018-06-04	< 1.56
CVE-2013-1624US	medium4.0	2.97% (87th)	—	1.48	2013-02-08	< 1.48
CVE-2016-1000339US	medium5.3	2.71% (86th)	—	1.56	2018-06-04	< 1.56
CVE-2016-1000345US	medium5.9	2.56% (85th)	—	1.56	2018-06-04	< 1.56
CVE-2016-1000341US	medium5.9	2.56% (85th)	—	1.56	2018-06-04	< 1.56
CVE-2016-1000340US	high7.5	2.30% (83rd)	—	1.56	2018-06-04	1.51 → 1.56
CVE-2016-1000346US	low3.7	2.17% (82nd)	—	1.56	2018-06-04	< 1.56
CVE-2016-1000352US	high7.4	2.17% (82nd)	—	1.56	2018-06-04	< 1.56
CVE-2016-1000344US	high7.4	2.17% (82nd)	—	1.56	2018-06-04	< 1.56
CVE-2016-1000342US	high7.5	1.83% (79th)	—	1.56	2018-06-04	< 1.56
CVE-2016-1000338US	high7.5	1.79% (78th)	—	1.56	2018-06-01	1.38 → 1.56
CVE-2020-15522US	medium5.9	1.52% (74th)	—	1.66	2021-05-20	< 1.66
CVE-2024-29857US	—	1.10% (66th)	—	1.78	2024-05-14	< 1.78
CVE-2023-33202US	medium5.5	1.00% (63rd)	—	no fix	2023-11-23	—
CVE-2020-26939US	medium5.3	0.92% (60th)	—	1.61	2020-11-02	< 1.61
CVE-2024-30171US	—	0.90% (60th)	—	1.78	2024-05-14	< 1.78
CVE-2023-33201US	medium5.3	0.77% (55th)	—	no fix	2023-07-05	1.49 → 1.70
CVE-2024-34447US	—	0.77% (55th)	—	1.78	2024-05-03	1.61 → 1.78
CVE-2025-14813US	—OT elevated	0.32% (25th)	—	no fix	2026-04-15	≤ 1.7.0
CVE-2018-5382US	medium4.4OT elevated	0.26% (18th)	—	1.50	2018-04-16	< 1.50

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-310CWE-3107 CVEs
CWE-203Observable Discrepancy4 CVEs
CWE-327Use of a Broken or Risky Cryptographic Algorithm3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-347Improper Verification of Cryptographic Signature2 CVEs
CWE-361CWE-3612 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs

sources (1)

Which sources assert this record, and when.

USOSV.dev25 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan