← Vulnerability feed

Vulnerability record · CVE-2023-40309 · published 12 September 2023

CVE-2023-40309: Sap commoncryptolib incorrect authorization vulnerability

Sap · Commoncryptolib

SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong authorization checks for an authenticated user, resulting in escalation of privileges. Depending on the application and the level of privileges acquired, an attacker could abuse functionality restricted to a particular user group as well as read, modify or delete restricted data.

9.8 CVSS 3.1 Critical EPSS 0.88% · top 42.7% CWE-863 · Incorrect authorization
9.8CVSS 3.1 base score
0.88%EPSS exploitation probability, 30 days
NoNot in CISA KEV
9Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong authorization checks for an authenticated user, resulting in escalation of privileges. Depending on the application and the level of privileges acquired, an attacker could abuse functionality restricted to a particular user group as well as read, modify or delete restricted data.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

9 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://me.sap.com/notes/3340576 Permissions RequiredVendor Advisory
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html Vendor Advisory
https://me.sap.com/notes/3340576 Permissions RequiredVendor Advisory
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html Vendor Advisory

Track CVE-2023-40309 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2022-22536SAP NetWeaver and Web Dispatcher HTTP request smugglingSAP NetWeaver Application Server ABAP, NetWeaver Application Server Java, ABAP Platform, Content Server 7.53 and Web Dispatcher mishandle HTTP reques…KEVEPSS 98%analysed8.8CVE-2026-0492Sap hana database missing authentication for critical function vulnerabilitySAP HANA database is vulnerable to privilege escalation allowing an attacker with valid credentials of any user to switch to another user potentially…EPSS 0.33%8.8CVE-2023-24523Sap host agent exposure of resource to wrong sphere vulnerabilityAn attacker authenticated as a non-admin user with local access to a server port assigned to the SAP Host Agent (Start Service) - versions 7.21, 7.22…EPSS 0.19%7.5CVE-2023-40308Sap commoncryptolib out-of-bounds write vulnerabilitySAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a memory corruption error in a…EPSS 0.75%7.5CVE-2021-38177Sap commoncryptolib null pointer dereference vulnerabilitySAP CommonCryptoLib version 8.5.38 or lower is vulnerable to null pointer dereference vulnerability when an unauthenticated attacker sends crafted ma…EPSS 3.2%7.5CVE-2020-6186Sap host agent missing authentication for critical function vulnerabilitySAP Host Agent, version 7.21, allows an attacker to cause a slowdown in processing of username/password-based authentication requests of the SAP Host…EPSS 1.2%7.5CVE-2019-0350Sap hana database vulnerabilitySAP HANA Database, versions 1.0, 2.0, allows an unauthorized attacker to send a malformed connection request, which crashes the indexserver of an SAP…EPSS 1.1%7.5CVE-2018-2424Sap hana database improper input validation vulnerabilitySAP UI5 did not validate user input before adding it to the DOM structure. This may lead to malicious user-provided JavaScript code being added to th…EPSS 2.4%

Source: NIST National Vulnerability Database (record CVE-2023-40309), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.