Advisories · Technology

SAP_SE SAP Extended Application Services and Runtime (XSA).

Every CVE that names SAP_SE SAP Extended Application Services and Runtime (XSA) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-40309 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Missing Authorization check in SAP CommonCryptoLib
- SAP_SE SAP CommonCryptoLib
- SAP_SE SAP NetWeaver AS ABAP, SAP NetWeaver AS Java and ABAP Platform of S/4HANA on-premise
- Broken access control
Not analysed yet 12 Sept 2023
CVE-2023-40308 CVE record

CVSS 7.5 High

Memory Corruption vulnerability in SAP CommonCryptoLib
- SAP_SE SAP CommonCryptoLib
- SAP_SE SAP NetWeaver AS ABAP, SAP NetWeaver AS Java and ABAP Platform of S/4HANA on-premise
- Memory corruption
Not analysed yet 12 Sept 2023