We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2024-47578

Multiple vulnerabilities in SAP NetWeaver AS for JAVA(Adobe Document Services)



Description

Adobe Document Service allows an attacker with administrator privileges to send a crafted request from a vulnerable web application. It is usually used to target internal systems behind firewalls that are normally inaccessible to an attacker from the external network, resulting in a Server-Side Request Forgery vulnerability. On successful exploitation, the attacker can read or modify any file and/or make the entire system unavailable.

Reserved 2024-09-27 | Published 2024-12-10 | Updated 2024-12-10 | Assigner sap


CRITICAL: 9.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Problem types

CWE-918: Server-Side Request Forgery (SSRF)

Product status

Default status
unaffected

ADSSSAP 7.50
affected

References

me.sap.com/notes/3536965

url.sap/sapsecuritypatchday

cve.org (CVE-2024-47578)

nvd.nist.gov (CVE-2024-47578)

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-47578

Support options

Helpdesk Chat, Email, Knowledgebase
Subscribe to our newsletter to learn more about our work.