Sapcryptolib

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2016-4407 Oct 13, 14:59 MEDIUM This Month

The DSA algorithm implementation in SAP SAPCRYPTOLIB 5.555.38 does not properly check signatures, which allows remote authenticated users to impersonate arbitrary users via unspecified vectors, aka. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass SAP Sapcryptolib

NVD

CVSS 3.0

6.5

EPSS

0.2%

CVE-2014-8587 Nov 04, 15:55 HIGH This Week

SAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, as used in SAP NetWeaver AS for ABAP and SAP HANA, allows remote attackers to spoof Digital Signature Algorithm (DSA). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure SAP Netweaver Hana Commoncryptolib +2

NVD

CVSS 2.0

7.5

EPSS

0.6%

CVE-2016-4407

EPSS 0% CVSS 6.5

MEDIUM This Month

Authentication Bypass SAP Sapcryptolib

NVD

CVE-2014-8587

EPSS 1% CVSS 7.5

HIGH This Week

Information Disclosure SAP Netweaver +4

NVD