Sap Commoncryptolib (Sap Se) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2025-11-11. Vendor: Sap Se.

CVEs of Sap Commoncryptolib

• CVE-2025-42940 - CVSS 7.5 (high), 2025-11-11: SAP CommonCryptoLib does not perform necessary boundary checks during pre-authentication parsing of manipulated ASN.1 data over the network. This may result…
• CVE-2023-40309 - CVSS 9.8 (critical), 2023-09-12: SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong authorization checks for an authenticated user,…
• CVE-2023-40308 - CVSS 7.5 (high), 2023-09-12: SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a memory corruption error in a library…
• CVE-2021-38177 - CVSS 7.5 (high), 2021-09-14: SAP CommonCryptoLib version 8.5.38 or lower is vulnerable to null pointer dereference vulnerability when an unauthenticated attacker sends crafted malicious…