CVE-2023-40308 Memory Corruption vulnerability in SAP CommonCryptoLib

2023-09-1201:21:15

CWE-476

sap

raw.githubusercontent.com

cve-2023-40308

sap commoncryptolib

unauthenticated attacker

memory corruption error

open port

target component

unavailability

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.5%

JSON

SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a memory corruption error in a library which in turn causes the target component to crash making it unavailable. There is no ability to view or modify any information.