cveboard RSS feed

CVE-2023-40309

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2023
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Missing Authorization check in SAP CommonCryptoLib

SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong authorization checks for an authenticated user, resulting in escalation of privileges. Depending on the application and the level of privileges acquired, an attacker could abuse functionality restricted to a particular user group as well as read, modify or delete restricted data.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

SAP CommonCryptoLib

Vendor
SAP_SE
Product
SAP CommonCryptoLib
Platforms
Unknown
Default status
unaffected
SAP CommonCryptoLib · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
8affectedUnavailableUnavailableUnavailableNone listed

SAP NetWeaver AS ABAP, SAP NetWeaver AS Java and ABAP Platform of S/4HANA on-premise

Vendor
SAP_SE
Product
SAP NetWeaver AS ABAP, SAP NetWeaver AS Java and ABAP Platform of S/4HANA on-premise
Platforms
Unknown
Default status
unaffected
SAP NetWeaver AS ABAP, SAP NetWeaver AS Java and ABAP Platform of S/4HANA on-premise · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
KERNEL 7.22affectedUnavailableUnavailableUnavailableNone listed
KERNEL 7.53affectedUnavailableUnavailableUnavailableNone listed
KERNEL 7.54affectedUnavailableUnavailableUnavailableNone listed
KERNEL 7.77affectedUnavailableUnavailableUnavailableNone listed
KERNEL 7.85affectedUnavailableUnavailableUnavailableNone listed
KERNEL 7.89affectedUnavailableUnavailableUnavailableNone listed
KERNEL 7.91affectedUnavailableUnavailableUnavailableNone listed
KERNEL 7.92affectedUnavailableUnavailableUnavailableNone listed
KERNEL 7.93affectedUnavailableUnavailableUnavailableNone listed
KERNEL 8.04affectedUnavailableUnavailableUnavailableNone listed
KERNEL64UC 7.22affectedUnavailableUnavailableUnavailableNone listed
KERNEL64UC 7.22EXTaffectedUnavailableUnavailableUnavailableNone listed
KERNEL64UC 7.53affectedUnavailableUnavailableUnavailableNone listed
KERNEL64UC 8.04affectedUnavailableUnavailableUnavailableNone listed
KERNEL64NUC 7.22affectedUnavailableUnavailableUnavailableNone listed
KERNEL64NUC 7.22EXTaffectedUnavailableUnavailableUnavailableNone listed

SAP Web Dispatcher

Vendor
SAP_SE
Product
SAP Web Dispatcher
Platforms
Unknown
Default status
unaffected
SAP Web Dispatcher · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
7.22EXTaffectedUnavailableUnavailableUnavailableNone listed
7.53affectedUnavailableUnavailableUnavailableNone listed
7.54affectedUnavailableUnavailableUnavailableNone listed
7.77affectedUnavailableUnavailableUnavailableNone listed
7.85affectedUnavailableUnavailableUnavailableNone listed
7.89affectedUnavailableUnavailableUnavailableNone listed

SAP Content Server

Vendor
SAP_SE
Product
SAP Content Server
Platforms
Unknown
Default status
unaffected
SAP Content Server · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
6.50affectedUnavailableUnavailableUnavailableNone listed
7.53affectedUnavailableUnavailableUnavailableNone listed
7.54affectedUnavailableUnavailableUnavailableNone listed

SAP HANA Database

Vendor
SAP_SE
Product
SAP HANA Database
Platforms
Unknown
Default status
unaffected
SAP HANA Database · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
2.00affectedUnavailableUnavailableUnavailableNone listed

SAP Host Agent

Vendor
SAP_SE
Product
SAP Host Agent
Platforms
Unknown
Default status
unaffected
SAP Host Agent · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
722affectedUnavailableUnavailableUnavailableNone listed

SAP Extended Application Services and Runtime (XSA)

Vendor
SAP_SE
Product
SAP Extended Application Services and Runtime (XSA)
Platforms
Unknown
Default status
unaffected
SAP Extended Application Services and Runtime (XSA) · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
SAP_EXTENDED_APP_SERVICES 1affectedUnavailableUnavailableUnavailableNone listed
XS_ADVANCED_RUNTIME 1.00affectedUnavailableUnavailableUnavailableNone listed

SAPSSOEXT

Vendor
SAP_SE
Product
SAPSSOEXT
Platforms
Unknown
Default status
unaffected
SAPSSOEXT · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
17affectedUnavailableUnavailableUnavailableNone listed