Commoncryptolib (Sap) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 4 known versions, newest CVE from 2023-09-12. Vendor: Sap.

CVEs of Commoncryptolib

• CVE-2023-40309 - CVSS 9.8 (critical), 2023-09-12: SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong authorization checks for an authenticated user,…
• CVE-2023-40308 - CVSS 7.5 (high), 2023-09-12: SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a memory corruption error in a library…
• CVE-2021-38177 - CVSS 7.5 (high), 2021-09-14: SAP CommonCryptoLib version 8.5.38 or lower is vulnerable to null pointer dereference vulnerability when an unauthenticated attacker sends crafted malicious…
• CVE-2014-8587 - CVSS 7.5 (high), 2014-11-04: SAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, as used in SAP NetWeaver AS for ABAP and SAP HANA, allows remote attackers to…