CWE-780 · Cryptography
Use of RSA Algorithm without OAEP
3CVEs
SortMost likely exploited
3 CVEs with CWE-780 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2022-40722Misconfiguration of RSA padding for offline MFA in the PingID Adapter for PingFederate.Ping Identity · PingID Adapter for PingFederate · CVSS 7.7 · 2023-04-25 | 7.7 | 0.3% | 2023-04-25 |
| CVE-2024-51456IBM Robotic Process Automation information disclosureIBM · Robotic Process Automation · CVSS 5.9 · 2025-01-12 | 5.9 | 0.3% | 2025-01-12 |
| CVE-2025-9071Insecure RSA-OAEP implementation with all-zero seed for padding in Oberon PSA CryptoOberon microsystems AG · Oberon PSA Crypto · CVSS 2.3 · 2025-08-29 | 2.3 | 0.2% | 2025-08-29 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.