CVE-2020-26184

Published: Jun 1, 2022Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Dell BSAFE Micro Edition Suite, versions prior to 4.5.1, contain an Improper Certificate Validation vulnerability.

Affected (7)

Products: Dell: Bsafe Micro Edition Suite · Oracle: Http Server, Security Service, Weblogic Server Proxy Plug In

1 product

Bsafe Micro Edition Suite

3 products

Security Service

Weblogic Server Proxy Plug In

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Dell Bsafe Micro Edition Suite	Before 4.5.1

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Oracle Http Server	Version 12.2.1.3.0
Oracle Http Server	Version 12.2.1.4.0
Oracle Security Service	Version 12.2.1.3.0
Oracle Security Service	Version 12.2.1.4.0
Oracle Weblogic Server Proxy Plug In	Version 12.2.1.3.0
Oracle Weblogic Server Proxy Plug In	Version 12.2.1.4.0

Related CWEs

Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

References (4)

https://www.dell.com/support/article/en-us/sln322935/dsa-2020-245-dell-bsafe-micro-edition-suite-multiple-vulnerabilities?lang=en

Source: security_alert@emc.com

PatchVendor Advisory

https://www.oracle.com/security-alerts/cpujul2022.html

Source: security_alert@emc.com

PatchThird Party Advisory

https://www.dell.com/support/article/en-us/sln322935/dsa-2020-245-dell-bsafe-micro-edition-suite-multiple-vulnerabilities?lang=en

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://www.oracle.com/security-alerts/cpujul2022.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

Timeline

No history available yet.