SAP SE SAP CommonCryptoLib

• CVE-2025-42940 High 7.5 Memory Corruption vulnerability in SAP CommonCryptoLib 0.5%
• CVE-2023-40309 Critical 9.8 Missing Authorization check in SAP CommonCryptoLib 0.9%
• CVE-2023-40308 High 7.5 Memory Corruption vulnerability in SAP CommonCryptoLib 0.8%
• CVE-2021-38177 High 7.5 SAP CommonCryptoLib version 8.5.38 or lower is vulnerable to null pointer dereference vulnerability when an unauthenticated attacker sends crafted malicious data in the HTTP requests over the network, 3.2%