Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2018-07-09	CVE-2018-1000613	Unsafe Reflection vulnerability in multiple products Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in XMSS/XMSS^MT private key deserialization that can result in Deserializing an XMSS/XMSS^MT private key can result in the execution of unexpected code. network low complexity bouncycastle netapp opensuse oracle CWE-470 critical	9.8