Exposure of OpenSSL

Web server extensions
541
exposure score
62,289
sites use
0
exploited
41
critical

CVEs

247 results
CVE-2023-3446MEDIUMExcessive time spent checking DH keys and parametersEPSS 6.5%CVE-2019-1549—Fork ProtectionEPSS 6.2%CVE-2024-9143MEDIUMLow-level invalid GF(2^m) parameters lead to OOB memory accessEPSS 5.8%CVE-2019-1543—ChaCha20-Poly1305 with long noncesEPSS 5.7%CVE-2024-5535CRITICALSSL_select_next_proto buffer overreadEPSS 5.6%CVE-2025-11187MEDIUMImproper validation of PBMAC1 parameters in PKCS#12 MAC verificationEPSS 5.2%CVE-2023-0215HIGHUse-after-free following BIO_new_NDEFEPSS 5.0%CVE-2016-8518—A remote denial of service vulnerability in HPE Systems Insight Manager in all versions prior to 7.6 was found.EPSS 5.0%CVE-2016-8516—A remote denial of service vulnerability in HPE Systems Insight Manager in all versions prior to 7.6 was found.EPSS 5.0%CVE-2020-1968LOWRaccoon attackEPSS 4.9%CVE-2022-2097—AES OCB fails to encrypt some bytesEPSS 4.9%CVE-2018-0735—Timing attack against ECDSA signature generationEPSS 4.7%CVE-2022-1473HIGHResource leakage when decoding certificates and keysEPSS 4.7%CVE-2023-5678MEDIUMExcessive time spent in DH check / generation with large Q parameter valueEPSS 4.5%CVE-2022-3358—Using a Custom Cipher with NID_undef may lead to NULL encryptionEPSS 4.0%CVE-2026-45447HIGHHeap Use-After-Free in the PKCS7_verify() FunctionEPSS 4.0%CVE-2023-0464HIGHExcessive Resource Usage Verifying X.509 Policy ConstraintsEPSS 4.0%CVE-2023-5363HIGHIncorrect cipher key & IV length processingEPSS 3.9%CVE-2019-1563—Padding Oracle in PKCS7_dataDecode and CMS_decrypt_set1_pkeyEPSS 3.8%CVE-2021-4160—BN_mod_exp may produce incorrect results on MIPSEPSS 3.8%