Variant weakness
Incomplete
CWE-780: Use of RSA Algorithm without OAEP
The product uses the RSA algorithm but does not incorporate Optimal Asymmetric Encryption Padding (OAEP), which might weaken the encryption.
Last updated
3
Recorded CVEs
With this primary weakness
0
KEVs
In the CISA KEV catalog
Medium
Likelihood of exploit
Per MITRE
Variant
Abstraction
MITRE classification
Overview
Padding schemes are often used with cryptographic algorithms to make the plaintext less predictable and complicate attack efforts. The OAEP scheme is often used with RSA to nullify the impact of predictable common text.
Real-world CVEs
3 recorded CVEs are caused by CWE-780 (Use of RSA Algorithm without OAEP). The highest-severity and most recent are shown first. 0 new CWE-780 CVEs have been recorded so far in 2026 (2 in 2025).
Common consequences
What can happen when CWE-780 is exploited.