CVE-2024-47580mediumCWE-538

CVE-2024-47580: falha de média gravidade em SAP_SE SAP NetWeaver AS for JAVA (Adobe…

Multiple vulnerabilities in SAP NetWeaver AS for JAVA(Adobe Document Services)

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SAP NetWeaver AS for JAVA

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.8epss 0.5%
An attacker authenticated as an administrator can use an exposed webservice to create a PDF with an embedded attachment. By specifying the file to be an internal server file and subsequently downloading the generated PDF, the attacker can read any file on the server with no effect on integrity or availability.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Produtos afetados
SAP_SE · SAP NetWeaver AS for JAVA (Adobe Document Services)
CVEs relacionadas — SAP_SE SAP NetWeaver AS for JAVA (Adobe…

No mesmo produto, das mais perigosas para as menos.

CVE-2024-47578CRITICALMultiple vulnerabilities in SAP NetWeaver AS for JAVA(Adobe Document Services)EPSS 0.9%CVE-2024-47579MEDIUMMultiple vulnerabilities in SAP NetWeaver AS for JAVA(Adobe Document Services)EPSS 0.5%