SAP SE SAP Extended Application Services and Runtime (XSA)

• CVE-2023-40309 Critical 9.8 Missing Authorization check in SAP CommonCryptoLib 0.9%
• CVE-2023-40308 High 7.5 Memory Corruption vulnerability in SAP CommonCryptoLib 0.8%