CVE-2023-40308highCWE-787

CVE-2023-40308: falha de alta gravidade em SAP_SE SAP CommonCryptoLib

Memory Corruption vulnerability in SAP CommonCryptoLib

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SAP NetWeaver AS ABAP+ Monitorar SAP NetWeaver AS Java

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 0.8%
SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a memory corruption error in a library which in turn causes the target component to crash making it unavailable. There is no ability to view or modify any information.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
SAP_SE · SAP CommonCryptoLibSAP_SE · SAP Content ServerSAP_SE · SAP Extended Application Services and Runtime (XSA)SAP_SE · SAP HANA DatabaseSAP_SE · SAP Host AgentSAP_SE · SAP NetWeaver AS ABAP, SAP NetWeaver AS Java and ABAP Platform of S/4HANA on-premiseSAP_SE · SAPSSOEXTSAP_SE · SAP Web Dispatcher
CVEs relacionadas — SAP_SE SAP CommonCryptoLib

No mesmo produto, das mais perigosas para as menos.

CVE-2023-40309CRITICALMissing Authorization check in SAP CommonCryptoLibEPSS 0.9%CVE-2025-42940HIGHMemory Corruption vulnerability in SAP CommonCryptoLibEPSS 0.5%