CVE-2024-47579mediumCWE-538

CVE-2024-47579: falha de média gravidade em SAP_SE SAP NetWeaver AS for JAVA (Adobe…

Multiple vulnerabilities in SAP NetWeaver AS for JAVA(Adobe Document Services)

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SAP NetWeaver AS for JAVA

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.8epss 0.5%
An attacker authenticated as an administrator can use an exposed webservice to upload or download a custom PDF font file on the system server. Using the upload functionality to copy an internal file into a font file and subsequently using the download functionality to retrieve that file allows the attacker to read any file on the server with no effect on integrity or availability
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Produtos afetados
SAP_SE · SAP NetWeaver AS for JAVA (Adobe Document Services)
CVEs relacionadas — SAP_SE SAP NetWeaver AS for JAVA (Adobe…

No mesmo produto, das mais perigosas para as menos.

CVE-2024-47578CRITICALMultiple vulnerabilities in SAP NetWeaver AS for JAVA(Adobe Document Services)EPSS 0.9%CVE-2024-47580MEDIUMMultiple vulnerabilities in SAP NetWeaver AS for JAVA(Adobe Document Services)EPSS 0.5%