CVE-2024-47580mediumCWE-538

CVE-2024-47580: fallo de gravedad media en SAP_SE SAP NetWeaver AS for JAVA (Adobe…

Multiple vulnerabilities in SAP NetWeaver AS for JAVA(Adobe Document Services)

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear SAP NetWeaver AS for JAVA

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 6.8epss 0.5%
An attacker authenticated as an administrator can use an exposed webservice to create a PDF with an embedded attachment. By specifying the file to be an internal server file and subsequently downloading the generated PDF, the attacker can read any file on the server with no effect on integrity or availability.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Productos afectados
SAP_SE · SAP NetWeaver AS for JAVA (Adobe Document Services)
CVEs relacionadas — SAP_SE SAP NetWeaver AS for JAVA (Adobe…

En el mismo producto, de las más peligrosas a las menos.

CVE-2024-47578CRITICALMultiple vulnerabilities in SAP NetWeaver AS for JAVA(Adobe Document Services)EPSS 0.9%CVE-2024-47579MEDIUMMultiple vulnerabilities in SAP NetWeaver AS for JAVA(Adobe Document Services)EPSS 0.5%