CVE-2016-4407

—

CVSS 3.0

6.5 medium

EPSS

<1%p59

Published

Oct 13, 2016 (Oct 13, 2016)

Modified

Jun 17, 2026

Description

The DSA algorithm implementation in SAP SAPCRYPTOLIB 5.555.38 does not properly check signatures, which allows remote authenticated users to impersonate arbitrary users via unspecified vectors, aka SAP Security Note 2223008.

Vendors: sap
Products: sapcryptolib
Weakness: CWE-284
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.