CVE-2014-8587
sap: no CVSS score yet. EPSS 1.3% chance of exploitation in the next 30 days.
SAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, as used in SAP NetWeaver AS for ABAP and SAP HANA, allows remote attackers to spoof Digital Signature Algorithm (DSA) signatures via unspecified vectors.
- EPSS
- 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
- CWE
- CWE-310
- Published
- Modified
- Record from
- the NVD, synced
Affected
- sap:commoncryptolib
- sap:hana
- sap:netweaver
- sap:sapcryptolib
- sap:sapseculib
References
- http://blog.onapsis.com/sap-security-note-2067859-potential-exposure-to-digital-signature-spoofing/
- http://secunia.com/advisories/57606
- http://service.sap.com/sap/support/notes/2067859
- https://twitter.com/SAP_Gsupport/status/522401681997570048
- http://blog.onapsis.com/sap-security-note-2067859-potential-exposure-to-digital-signature-spoofing/