Exposure of OpenSSL

Web server extensions
541
exposure score
62,289
sites use
0
exploited
41
critical

CVEs

247 results
CVE-2025-9230CRITICALOut-of-bounds read & write in RFC 3211 KEK UnwrapEPSS 1.6%CVE-2016-8517—A cross site scripting vulnerability in HPE Systems Insight Manager in all versions prior to 7.6 was found.EPSS 1.5%CVE-2022-4203MEDIUMX.509 Name Constraints Read Buffer OverflowEPSS 1.4%CVE-2022-3996HIGHX.509 Policy Constraints Double LockingEPSS 1.3%CVE-2022-1434—Incorrect MAC key used in the RC4-MD5 ciphersuiteEPSS 1.2%CVE-2026-14457HIGHRPK Server Signature Algorithm Selection Can Dereference a Missing CertificateEPSS 1.2%CVE-2026-42764HIGHNULL Pointer Dereference in QUIC Server Initial Packet HandlingEPSS 1.2%CVE-2026-63073CRITICALUntrusted Sender DN Used as Format String in CMP Response ValidationEPSS 1.2%CVE-2017-16065—openssl.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.EPSS 1.2%CVE-2017-16064—node-openssl was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.EPSS 1.2%CVE-2024-4603MEDIUMExcessive time spent checking DSA keys and parametersEPSS 1.1%CVE-2019-1547—ECDSA remote timing attackEPSS 1.1%CVE-2026-75806MEDIUMUnauthenticated and Undersized DTLS 1.2 AEAD Record Causes DoSEPSS 1.1%CVE-2026-42766MEDIUMPossible NULL Dereference in Password-Based CMS DecryptionEPSS 1.1%CVE-2026-34182CRITICALCMS AuthEnvelopedData Processing May Accept Forged MessagesEPSS 1.1%CVE-2026-31790HIGHIncorrect Failure Handling in RSA KEM RSASVE EncapsulationEPSS 1.0%CVE-2026-34183HIGHUnbounded Memory Growth in the QUIC PATH_CHALLENGE HandlerEPSS 1.0%CVE-2026-34180HIGHHeap Buffer Over-read in ASN.1 Content ParsingEPSS 1.0%CVE-2023-1255MEDIUMInput buffer over-read in AES-XTS implementation on 64 bit ARMEPSS 1.0%CVE-2025-69421HIGHNULL Pointer Dereference in PKCS12_item_decrypt_d2i_ex functionEPSS 0.9%