high7.5
CVE-2023-40308
SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a memory corruption error in a library w…
Impact
SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a memory corruption error in a library which in turn causes the target component to crash making it unavailable. There is no ability to view or modify any information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Commoncryptolib | Version 8.0.0 |
| Sap | Content Server | Versions 6.50, 7.53, 7.54 |
| Sap | Extended Application Services And Runtime | Version 1.0 |
| Sap | Hana Database | Version 2.0 |
| Sap | Host Agent | Version 722 |
| Sap | Netweaver Application Server Abap | Versions 7.22ext, kernel_7.22, kernel_7.53, kernel_7.54, kernel_7.77, kernel_7.85 |
| Sap | Netweaver Application Server Java | Versions kernel_7.22, kernel_7.53, kernel_7.54, kernel_7.77, kernel_7.85, kernel_7.89 |
| Sap | Sapssoext | Version 17.0 |
| Sap | Web Dispatcher | Versions 7.22ext, 7.53, 7.54, 7.77, 7.85, 7.89 |