https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 06:26:34 +0000 https://cve.radiocsirt.org/vuln/cve-2023-40309 <p><strong>Affected:</strong> SAP_SE SAP CommonCryptoLib, SAP_SE SAP NetWeaver AS ABAP, SAP NetWeaver AS Java and ABAP Platform of S/4HANA on-premise, SAP_SE SAP Web Dispatcher, SAP_SE SAP Content Server, SAP_SE SAP HANA Database, SAP_SE SAP Host Agent, SAP_SE SAP Extended Application Services and Runtime (XSA), SAP_SE SAPSSOEXT</p> <p>SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong authorization checks for an authenticated user, resulting in escalation of privileges. Depending on the application and the level of privileges acquired, an attacker could abuse functionality restricted to a particular user group as well as read, modify or delete restricted data.</p> <p><strong>Affected:</strong> SAP_SE SAP CommonCryptoLib, SAP_SE SAP NetWeaver AS ABAP, SAP NetWeaver AS Java and ABAP Platform of S/4HANA on-premise, SAP_SE SAP Web Dispatcher, SAP_SE SAP Content Server, SAP_SE SAP HANA Database, SAP_SE SAP Host Agent, SAP_SE SAP Extended Application Services and Runtime (XSA), SAP_SE SAPSSOEXT</p> <p>SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong authorization checks for an authenticated user, resulting in escalation of privileges. Depending on the application and the level of privileges acquired, an attacker could abuse functionality restricted to a particular user group as well as read, modify or delete restricted data.</p> https://cve.radiocsirt.org/vuln/cve-2023-40309