Recent Vulnerabilities Product List Research Posts Trends Blog Docs About Contact

Published: 19/04/2025 Updated: 21/04/2025

Domain Validation Bypass Leading to Unauthorized TLS Certificate Issuance in SSL.com

SSL.com prior to 2025-04-19, when domain validation method 3.2.2.4.14 is used, processes certificate requests such that a trusted TLS certificate may be issued for the domain name of a requester's email address, even when the requester does not otherwise establish administrative control of that domain.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ssl.com ssl.com

CWE-348 https://nvd.nist.gov https://www.first.org/epss https://bugzilla.mozilla.org/show_bug.cgi?id=1961406 https://news.ycombinator.com/item?id=43738485

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2025-43918

Vulnerability Summary

References

Vulmon Search

About

Products

Connect