Maven org.bouncycastle:bcprov-jdk14

Name: Maven org.bouncycastle:bcprov-jdk14
Brand: Maven

productUS

pkg:maven/org.bouncycastle/bcprov-jdk14

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

unpatched

critical

by severity

0critical9high8medium1low

updated 2026-10-28

vulnerabilities (26)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-28052US	high8.1	7.22% (94th)	Exploit	1.67	2020-12-18	1.65 → 1.67
CVE-2019-17359US	high7.5	8.77% (95th)	—	1.64	2019-10-08	1.63 → 1.64
CVE-2015-7940US	medium5.0	4.69% (92nd)	—	1.51	2015-11-09	< 1.51
CVE-2018-1000180US	high7.5OT elevated	3.42% (89th)	—	1.60	2018-06-05	< 1.60
CVE-2016-1000343US	high7.5	3.25% (88th)	—	1.56	2018-06-04	< 1.56
CVE-2016-1000339US	medium5.3	2.71% (86th)	—	1.56	2018-06-04	< 1.56
CVE-2016-1000345US	medium5.9	2.56% (85th)	—	1.56	2018-06-04	< 1.56
CVE-2016-1000341US	medium5.9	2.56% (85th)	—	1.56	2018-06-04	< 1.56
CVE-2016-1000340US	high7.5	2.30% (83rd)	—	1.56	2018-06-04	1.51 → 1.56
CVE-2016-1000346US	low3.7	2.17% (82nd)	—	1.56	2018-06-04	< 1.56
CVE-2016-1000352US	high7.4	2.17% (82nd)	—	1.56	2018-06-04	< 1.56
CVE-2016-1000344US	high7.4	2.17% (82nd)	—	1.56	2018-06-04	< 1.56
CVE-2016-1000342US	high7.5	1.83% (79th)	—	1.56	2018-06-04	< 1.56
CVE-2016-1000338US	high7.5	1.79% (78th)	—	1.56	2018-06-01	1.38 → 1.56
CVE-2020-15522US	medium5.9	1.52% (75th)	—	1.66	2021-05-20	< 1.66
CVE-2024-29857US	—	1.10% (66th)	—	1.78	2024-05-14	< 1.78
CVE-2023-33202US	medium5.5	1.00% (63rd)	—	1.73	2023-11-23	< 1.73
CVE-2020-26939US	medium5.3	0.92% (60th)	—	1.61	2020-11-02	< 1.61
CVE-2024-30171US	—	0.90% (60th)	—	1.78	2024-05-14	< 1.78
CVE-2026-5598US	—	0.90% (60th)	—	1.81.1	2026-04-15	1.81 → 1.81.1
CVE-2023-33201US	medium5.3	0.77% (56th)	—	1.74	2023-07-05	1.49 → 1.74
CVE-2024-34447US	—	0.77% (56th)	—	1.78	2024-05-03	1.61 → 1.78
CVE-2024-30172US	—	0.75% (55th)	—	1.78	2024-05-14	1.73 → 1.78
CVE-2025-8885US	—	0.54% (45th)	—	1.78	2025-08-12	1.0 → 1.78
CVE-2026-0636US	—	0.53% (45th)	—	1.84	2026-04-15	1.74 → 1.84
CVE-2025-14813US	—OT elevated	0.32% (25th)	—	1.84	2026-04-15	3 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-310CWE-3106 CVEs
CWE-203Observable Discrepancy3 CVEs
CWE-347Improper Verification of Cryptographic Signature3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-327Use of a Broken or Risky Cryptographic Algorithm2 CVEs
CWE-361CWE-3612 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs

sources (1)

Which sources assert this record, and when.

USOSV.dev26 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan