AETERNAE AI RESEARCH LLC INDEPENDENT RESEARCH
ÆAETERNAERESEARCH
Sign inRequest access
← CVE index

Attributed metadata history

Δ / VULNERABILITY RECORD

CVE-2019-3740.

Source-reported disclosure and enrichment record.

SEVERITY / CVSSMEDIUM / 6.5CVSS 3.1 · nvd@nist.gov
EXPLOITATION STATUSNo cached KEV assertionThe local KEV cache may be unavailable or incomplete; this does not establish absence of exploitation.
RECORD STATUSModifiedModified Oct 08, 2026

Disclosure summary

RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through Timing Discrepancy vulnerabilities during DSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover DSA keys.

Source-reported weakness categories

CWE-310, CWE-203

Source-specific records & product guidance

Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.

NIST NVD · NVD-CVE-2019-3740

Open original source · Updated Oct 08, 2026

Only CPE matches marked vulnerable=true are indexed. AND/OR platform conditions must be checked in the original NVD record.

VendorProduct / associationVersion / bounds
dellbsafe_cert-j* · versionEndIncluding: 6.2.4
dellbsafe_crypto-j* · versionEndExcluding: 6.2.5
dellbsafe_ssl-j* · versionEndIncluding: 6.2.4.1
oracleapplication_performance_management13.3.0.0
oracleapplication_performance_management13.4.0.0
oraclecommunications_network_integrity7.3.2
oraclecommunications_network_integrity7.3.5
oraclecommunications_network_integrity7.3.6
oraclecommunications_unified_inventory_management7.3.2
oraclecommunications_unified_inventory_management7.3.4
oraclecommunications_unified_inventory_management7.3.5
oraclecommunications_unified_inventory_management7.4.0
oraclecommunications_unified_inventory_management7.4.1
oracledatabase12.1.0.2
oracledatabase12.2.0.1
oracledatabase18c
oracledatabase19c
oracleglobal_lifecycle_management_opatch* · versionEndExcluding: 12.2.0.1.22
oraclegoldengate* · versionEndExcluding: 19.1.0.0.0.210420
oracleretail_assortment_planning15.0.3.0
oracleretail_assortment_planning16.0.3.0
oracleretail_integration_bus14.1
oracleretail_integration_bus15.0
oracleretail_integration_bus16.0
oracleretail_predictive_application_server14.1.3.0
oracleretail_predictive_application_server15.0
oracleretail_predictive_application_server15.0.3.0
oracleretail_predictive_application_server16.0.3.0
oracleretail_service_backbone14.1
oracleretail_service_backbone15.0
oracleretail_service_backbone16.0
oracleretail_store_inventory_management14.0.4
oracleretail_store_inventory_management14.1.3
oracleretail_store_inventory_management15.0.3
oracleretail_store_inventory_management16.0.3
oracleretail_xstore_point_of_service15.0.3
oracleretail_xstore_point_of_service16.0.5
oracleretail_xstore_point_of_service17.0.3
oracleretail_xstore_point_of_service18.0.2
oracleretail_xstore_point_of_service19.0.1
oraclestoragetek_acsls8.5.1
oraclestoragetek_tape_analytics_sw_tool2.3
oracleweblogic_server10.3.6.0.0
oracleweblogic_server12.1.3.0.0
oracleweblogic_server12.2.1.3.0
oracleweblogic_server12.2.1.4.0
oracleweblogic_server14.1.1.0.0
NIST NVD · nvd:CVE-2019-3740

Open original source · Updated Oct 08, 2026

RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through Timing Discrepancy vulnerabilities during DSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover DSA keys.

Source severity: MEDIUM / 6.5

Indexed product associations

These cached associations support search and triage. Confirm applicability, platform conditions, and fixed versions in the original record.

VendorProductVersionSource / relationship
dellbsafe cert-j*nvd / vulnerable
dellbsafe crypto-j*nvd / vulnerable
dellbsafe ssl-j*nvd / vulnerable
oracleapplication performance management13.3.0.0nvd / vulnerable
oracleapplication performance management13.4.0.0nvd / vulnerable
oraclecommunications network integrity7.3.2nvd / vulnerable
oraclecommunications network integrity7.3.5nvd / vulnerable
oraclecommunications network integrity7.3.6nvd / vulnerable
oraclecommunications unified inventory management7.3.2nvd / vulnerable
oraclecommunications unified inventory management7.3.4nvd / vulnerable
oraclecommunications unified inventory management7.3.5nvd / vulnerable
oraclecommunications unified inventory management7.4.0nvd / vulnerable
oraclecommunications unified inventory management7.4.1nvd / vulnerable
oracledatabase12.1.0.2nvd / vulnerable
oracledatabase12.2.0.1nvd / vulnerable
oracledatabase18cnvd / vulnerable
oracledatabase19cnvd / vulnerable
oracleglobal lifecycle management opatch*nvd / vulnerable
oraclegoldengate*nvd / vulnerable
oracleretail assortment planning15.0.3.0nvd / vulnerable
oracleretail assortment planning16.0.3.0nvd / vulnerable
oracleretail integration bus14.1nvd / vulnerable
oracleretail integration bus15.0nvd / vulnerable
oracleretail integration bus16.0nvd / vulnerable
oracleretail predictive application server14.1.3.0nvd / vulnerable
oracleretail predictive application server15.0nvd / vulnerable
oracleretail predictive application server15.0.3.0nvd / vulnerable
oracleretail predictive application server16.0.3.0nvd / vulnerable
oracleretail service backbone14.1nvd / vulnerable
oracleretail service backbone15.0nvd / vulnerable
oracleretail service backbone16.0nvd / vulnerable
oracleretail store inventory management14.0.4nvd / vulnerable
oracleretail store inventory management14.1.3nvd / vulnerable
oracleretail store inventory management15.0.3nvd / vulnerable
oracleretail store inventory management16.0.3nvd / vulnerable
oracleretail xstore point of service15.0.3nvd / vulnerable
oracleretail xstore point of service16.0.5nvd / vulnerable
oracleretail xstore point of service17.0.3nvd / vulnerable
oracleretail xstore point of service18.0.2nvd / vulnerable
oracleretail xstore point of service19.0.1nvd / vulnerable
oraclestoragetek acsls8.5.1nvd / vulnerable
oraclestoragetek tape analytics sw tool2.3nvd / vulnerable
oracleweblogic server10.3.6.0.0nvd / vulnerable
oracleweblogic server12.1.3.0.0nvd / vulnerable
oracleweblogic server12.2.1.3.0nvd / vulnerable
oracleweblogic server12.2.1.4.0nvd / vulnerable
oracleweblogic server14.1.1.0.0nvd / vulnerable

Original records & references

GitHub repository matches

Repository matches are links and GitHub-supplied metadata only. They are not verified working proof-of-concept code. Each supported query is bounded to ten pages and at most 1,000 indexed results. This is not a complete index of GitHub or public exploit research. Coverage can also be limited by provider availability, rate limits, rejected metadata, incomplete search results, manual review, and the recorded refresh time.

0 reviewed associations0 unverified candidates

No stored repository matches

Repository discovery has not recorded an update for this CVE yet.

Discovery progress

0 of 3 discovery queries finished. GitHub returned 0 indexed results; 0 malformed or disallowed results were rejected.

No discovery update has been recorded for this CVE.

View all 0 stored repository matches

PUBLISHED 2019-09-18T23:15:11+00:00
MODIFIED 2026-10-08T22:16:54+00:00
INGESTED 2026-10-12T05:30:56+00:00