{"id":"CVE-2014-8587","aliases":["EUVD-2014-8424","GHSA-qvm2-xc63-59fm"],"status":"published","title":"SAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, as used in SAP...","description":"SAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, as used in SAP NetWeaver AS for ABAP and SAP HANA, allows remote attackers to spoof Digital Signature Algorithm (DSA) signatures via unspecified vectors.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01285,"percentile":0.70312,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-310"],"published":"2014-11-04T15:00:00Z","modified":"2026-06-17T00:16:58Z","products":[{"vendor":"sap","product":"commoncryptolib"},{"vendor":"sap","product":"hana"},{"vendor":"sap","product":"netweaver"},{"vendor":"sap","product":"sapcryptolib"},{"vendor":"sap","product":"sapseculib"}],"references":[{"url":"http://service.sap.com/sap/support/notes/2067859","tags":["x_refsource_CONFIRM","x_transferred","Permissions Required"]},{"url":"http://blog.onapsis.com/sap-security-note-2067859-potential-exposure-to-digital-signature-spoofing/","tags":["x_refsource_MISC","x_transferred","Broken Link"]},{"url":"https://twitter.com/SAP_Gsupport/status/522401681997570048","tags":["x_refsource_CONFIRM","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/57606","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Not Applicable"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8587"},{"url":"http://blog.onapsis.com/sap-security-note-2067859-potential-exposure-to-digital-signature-spoofing"},{"url":"https://github.com/advisories/GHSA-qvm2-xc63-59fm"}],"sources":{"cve":[{"id":"CVE-2014-8587","description":"SAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, as used in SAP NetWeaver AS for ABAP and SAP HANA, allows remote attackers to spoof Digital Signature Algorithm (DSA) signatures via unspecified vectors.","status":"published","published":"2014-11-04T15:00:00Z","modified":"2024-09-16T20:17:25.356Z","updated_at":"2026-11-02T14:33:43.566796Z"}],"euvd":[{"id":"EUVD-2014-8424","description":"SAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, as used in SAP NetWeaver AS for ABAP and SAP HANA, allows remote attackers to spoof Digital Signature Algorithm (DSA) signatures via unspecified vectors.","status":"published","published":"2014-11-04T15:00:00Z","modified":"2024-09-16T20:17:25Z","updated_at":"2026-11-03T00:55:15.468069Z"}],"ghsa":[{"id":"GHSA-qvm2-xc63-59fm","title":"SAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, as used in SAP...","description":"SAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, as used in SAP NetWeaver AS for ABAP and SAP HANA, allows remote attackers to spoof Digital Signature Algorithm (DSA) signatures via unspecified vectors.","status":"published","published":"2022-05-17T04:16:36Z","modified":"2025-04-12T12:42:32Z","updated_at":"2026-11-02T15:01:19.407948Z"}],"nvd":[{"id":"CVE-2014-8587","description":"SAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, as used in SAP NetWeaver AS for ABAP and SAP HANA, allows remote attackers to spoof Digital Signature Algorithm (DSA) signatures via unspecified vectors.","status":"published","published":"2014-11-04T15:55:07.31Z","modified":"2026-06-17T00:16:58.64Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-310"],"updated_at":"2026-11-02T14:02:57.304171Z"}]}}