The POODLE vulnerability lets the attacker eavesdrop on encrypted communication.

However, we suspect that it’s more likely that such servers use very old server software with very old configurations. Why do web servers support old protocols? Perhaps the administrators of those servers wanted to make sure that users can access them using very old browsers. Even more (over 30%) servers are vulnerable to the BEAST attack because they support TLS 1.0. The recent Acunetix 2020 Web Application Vulnerability Report shows that as many as 3.9% of web servers are still vulnerable to POODLE, which means they still support the SSL 3.0 protocol, despite the fact that the TLS protocol was introduced in 1999.

The vulnerability is no longer present in the Transport Layer Security protocol (TLS), which is the successor to SSL (Secure Socket Layer). This vulnerability lets an attacker eavesdrop on communication encrypted using SSLv3. The POODLE attack (Padding Oracle on Downgraded Legacy Encryption) exploits a vulnerability in the SSL 3.0 protocol (CVE-2014-3566).

What is wireshark legacy