Exposure of OpenSSL

Web server extensions
541
exposure score
62,289
sites use
0
exploited
41
critical

CVEs

247 results
CVE-2024-0727MEDIUMPKCS12 Decoding crashesEPSS 3.2%CVE-2023-3817MEDIUMExcessive time spent checking DH q parameter valueEPSS 3.0%CVE-2021-23839—Incorrect SSLv2 rollback protectionEPSS 3.0%CVE-2024-4741CRITICALUse After Free with SSL_free_buffersEPSS 2.9%CVE-2024-12797HIGHRFC7250 handshakes with unauthenticated servers don't abort as expectedEPSS 2.5%CVE-2011-4121—The OpenSSL extension of Ruby (Git trunk) versions after 2011-09-01 up to 2011-11-03 always generated an exponent value of '1' to be used foEPSS 2.5%CVE-2020-25644—A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes an HTTP session. It may allow the attackeEPSS 2.4%CVE-2023-6129MEDIUMPOLY1305 MAC implementation corrupts vector registers on PowerPCEPSS 2.3%CVE-2023-6237MEDIUMExcessive time spent checking invalid RSA public keysEPSS 2.3%CVE-2025-9231MEDIUMTiming side-channel in SM2 algorithm on 64 bit ARMEPSS 2.2%CVE-2022-1343MEDIUMOCSP_basic_verify may incorrectly verify the response signing certificateEPSS 2.2%CVE-2025-9232MEDIUMOut-of-bounds read in HTTP client no_proxy handlingEPSS 2.0%CVE-2023-0217HIGHNULL dereference validating DSA public keyEPSS 1.8%CVE-2023-0216HIGHInvalid pointer dereference in d2i_PKCS7 functionsEPSS 1.8%CVE-2023-0401HIGHNULL dereference during PKCS7 data verificationEPSS 1.8%CVE-2023-0466MEDIUMCertificate policy check not enabledEPSS 1.8%CVE-2023-0465MEDIUMInvalid certificate policies in leaf certificates are silently ignoredEPSS 1.8%CVE-2026-18798HIGHQUIC Server May Trigger Double Free When Processing INITIAL PacketEPSS 1.7%CVE-2026-63076HIGHInvalid Pointer Dereference in CMP Server via Crafted protectionAlgEPSS 1.6%CVE-2023-4807HIGHPOLY1305 MAC implementation corrupts XMM registers on WindowsEPSS 1.6%