Sapcryptolib

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2016-4407 MEDIUM This Month

The DSA algorithm implementation in SAP SAPCRYPTOLIB 5.555.38 does not properly check signatures, which allows remote authenticated users to impersonate arbitrary users via unspecified vectors, aka. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

SAP Authentication Bypass Sapcryptolib

NVD

CVSS 3.0

6.5

EPSS

0.2%

CVE-2014-8587 HIGH This Week

SAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, as used in SAP NetWeaver AS for ABAP and SAP HANA, allows remote attackers to spoof Digital Signature Algorithm (DSA). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure SAP Commoncryptolib Sapcryptolib Sapseculib +2

NVD

CVSS 2.0

7.5

EPSS

0.6%

CVE-2016-4407

EPSS 0% CVSS 6.5

MEDIUM This Month

SAP Authentication Bypass Sapcryptolib

NVD

CVE-2014-8587

EPSS 1% CVSS 7.5

HIGH This Week

Information Disclosure SAP Commoncryptolib +4

NVD