Login Request a demo
CO
Product
Commoncryptolib
by Sap · last CVE Sep 12, 2023
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 1High 2Medium 0Low 0
Severity
All severities4Critical1High2Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Commoncryptolib to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-40309
9.8
1%
Sep 12
SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong authorization checks for an authenticated user, resulting in escalation…
Affected: 8.0.0
CVE-2023-40308
7.5
1%
Sep 12
SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a memory corruption error in a library which in turn causes…
Affected: 8.0.0
CVE-2021-38177
7.5
3%
Sep 14
SAP CommonCryptoLib version 8.5.38 or lower is vulnerable to null pointer dereference vulnerability when an unauthenticated attacker sends crafted malicious data in the HTTP…
Affected: through 8.5.38
CVE-2014-8587
–
1%
Nov 4
SAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, as used in SAP NetWeaver AS for ABAP and SAP HANA, allows remote attackers to spoof Digital Signature…
Affected: through 8.4.29
Showing 4