CVE-2025-26333

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-26333
Dell BSAFE Crypto-J generates an error message that includes sensitive information about its environment and associated data. A remote attacker could potentially exploit this vulnerability, leading to information exposure.

5.9 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.dell.com/support/kbdoc/en-us/000296144/dsa-2025-100-dell-bsafe-crypto-j-security-update
Configurations

No configuration.

History

24 Oct 2025, 14:15

Type Values Removed Values Added
Summary (en) Dell Crypto-J generates an error message that includes sensitive information about its environment and associated data. A remote attacker could potentially exploit this vulnerability, leading to information exposure. (en) Dell BSAFE Crypto-J generates an error message that includes sensitive information about its environment and associated data. A remote attacker could potentially exploit this vulnerability, leading to information exposure.

25 Sep 2025, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-09-25 16:15

Updated : 2025-10-24 14:15

NVD link : CVE-2025-26333

Mitre link : CVE-2025-26333

CVE.ORG link : CVE-2025-26333

JSON object : View

Products Affected

No product.

CWE
CWE-209

Generation of Error Message Containing Sensitive Information