Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (prov modules).
This vulnerability is associated with program files LDAPStoreHelper.
This issue affects BC-JAVA: from 1.74 before 1.80.2, from 1.81 before 1.81.1, from 1.82 before 1.84.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | May 19, 2026 | Apr 15, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Apr 15, 2026 |
| Suse | — | Upgrade bouncycastle-pgUpgrade bouncycastle-jmailUpgrade bouncycastle-javadocUpgrade bouncycastle-mailUpgrade bouncycastle-utilUpgrade bouncycastle-pkixUpgrade bouncycastle-tlsUpgrade bouncycastle | Apr 29, 2026 | Apr 29, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub