Views:
Technical Analysis by CVE
 
1. CVE-2025-14819: OpenSSL partial chain store policy
  • CVSS 5.3 (Medium Severity)
  • Based on the analysis of the vulnerability by the TrendAI development team, it has been confirmed that Deep Security is not affected or impacted by this vulnerability because the product does not use the vulnerable option that can be exploited: CURLSSLOPT_NO_PARTIALCHAIN. 

2. CVE-2025-14017: Broken TLS options for threaded LDAPS

  • CVSS 6.3 (Medium Severity)
  • Based on the analysis of the vulnerability by the TrendAI development team, it has been confirmed that Deep Security is not affected or impacted by this vulnerability because the vulnerable options (LDAP/LDAPS) are disabled at build time in Deep Security. 
Keywords: TECHNICAL IMPACT STATEMENT: Deep Security 20.0 (CVE-2025-14819 & CVE-2025-14017)