Original: This version was later found vulnerable to a practical adaptive chosen ciphertext attack.
Simplified: Early versions of the PKCS standard used wikt: ad-hoc constructions, which were later found vulnerable to a practical adaptive chosen ciphertext attack.