CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2023-40308
High (7.5) in sap. EPSS 0.8% chance of exploitation in the next 30 days.
SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a memory corruption error in a library which in turn causes the target component to crash making it unavailable. There is no ability to view or modify any information.
Severity
- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
- CWE
- CWE-787
- Published
- Modified
- Record from
- the NVD, synced
Affected
- sap:commoncryptolib
- sap:content_server
- sap:extended_application_services_and_runtime
- sap:hana_database
- sap:host_agent
- sap:netweaver_application_server_abap
- sap:netweaver_application_server_java
- sap:sapssoext
- sap:web_dispatcher