5.8

CVE-2020-5359

Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to an Unchecked Return Value Vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to modify and corrupt the encrypted data.

Data is provided by the National Vulnerability Database (NVD)
Dell ≫ Bsafe Micro-edition-suite Version < 4.5
Oracle ≫ Database Version12.1.0.2 SwEditionenterprise
Oracle ≫ Database Version12.2.0.1 SwEditionenterprise
Oracle ≫ Database Version18c SwEditionenterprise
Oracle ≫ Database Version19c SwEditionenterprise
Oracle ≫ Weblogic Server Proxy Plug-in Version11.1.1.9.0
Oracle ≫ Weblogic Server Proxy Plug-in Version12.2.1.3.0
Oracle ≫ Weblogic Server Proxy Plug-in Version12.2.1.4.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.42% 0.59
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.8 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
security_alert@emc.com 5.8 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
CWE-252 Unchecked Return Value

The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.

CWE-544 Missing Standardized Error Handling Mechanism

The product does not use a standardized method for handling errors throughout the code, which might introduce inconsistent error handling and resultant weaknesses.