Lucene search
HistoryNov 04, 2014 - 3:55 p.m.
CVE-2014-8587
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.7 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
50.2%
SAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, as used in SAP NetWeaver AS for ABAP and SAP HANA, allows remote attackers to spoof Digital Signature Algorithm (DSA) signatures via unspecified vectors.
Affected configurations
Node
sapcommoncryptolibRange≤8.4.29
ORsapsapcryptolibRange≤5.555.37
ORsapsapseculibMatch-
saphanaMatch-
ORsapnetweaver
Related
cvelist
cvelist
CVE-2014-8587
2022-10-03 16:20:36
cve
cve
CVE-2014-8587
2022-10-03 16:20:36
prion
prion
Code injection
2014-11-04 15:55:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
6.7 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
50.2%
Related for NVD:CVE-2014-8587