Advisories · Technology

SAP_SE SAP Content Server.

Every CVE that names SAP_SE SAP Content Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-40309 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing Authorization check in SAP CommonCryptoLib
- SAP_SE SAP CommonCryptoLib
- SAP_SE SAP NetWeaver AS ABAP, SAP NetWeaver AS Java and ABAP Platform of S/4HANA on-premise
- Broken access control
Not analysed yet 12 Sept 2023
CVE-2023-40308 CVE record

CVSS 7.5 High

Memory Corruption vulnerability in SAP CommonCryptoLib
- SAP_SE SAP CommonCryptoLib
- SAP_SE SAP NetWeaver AS ABAP, SAP NetWeaver AS Java and ABAP Platform of S/4HANA on-premise
- Memory corruption
Not analysed yet 12 Sept 2023
CVE-2022-22536 CVE record

CVSS 9.8 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

HTTP request smuggling in SAP SE SAP NetWeaver and ABAP Platform and others
- SAP SE SAP NetWeaver and ABAP Platform
- SAP SE SAP Web Dispatcher
- HTTP request smuggling
Not analysed yet 9 Feb 2022