Advisories · Technology

SAP_SE SAP CommonCryptoLib.

Every CVE that names SAP_SE SAP CommonCryptoLib among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-42940 CVE record

CVSS 7.5 High

Memory Corruption vulnerability in SAP CommonCryptoLib
- SAP_SE SAP CommonCryptoLib
- Memory corruption
Not analysed yet 11 Nov 2025
CVE-2023-40309 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing Authorization check in SAP CommonCryptoLib
- SAP_SE SAP CommonCryptoLib
- SAP_SE SAP NetWeaver AS ABAP, SAP NetWeaver AS Java and ABAP Platform of S/4HANA on-premise
- Broken access control
Not analysed yet 12 Sept 2023
CVE-2023-40308 CVE record

CVSS 7.5 High

Memory Corruption vulnerability in SAP CommonCryptoLib
- SAP_SE SAP CommonCryptoLib
- SAP_SE SAP NetWeaver AS ABAP, SAP NetWeaver AS Java and ABAP Platform of S/4HANA on-premise
- Memory corruption
Not analysed yet 12 Sept 2023
CVE-2021-38177 CVE record

CVSS 7.5 High

SAP SE SAP CommonCryptoLib: SAP CommonCryptoLib version 8.5.38 or lower is vulnerable to null pointer dereference…
- SAP SE SAP CommonCryptoLib
Not analysed yet 14 Sept 2021