VDB
CVE-2024-47579
CVE-2024-47579
PUBLISHED
CVSS 6.800000190734863 MEDIUM
An attacker authenticated as an administrator can use an exposed webservice to upload or download a custom PDF font file on the system server. Using the upload functionality to copy an internal file into a font file and subsequently using the download functionality to retrieve that file allows the attacker to read any file on the server with no effect on integrity or availability
EPSS 0.53% · 43.1th percentile
Risk Scores
CVSS 3.1
6.800000190734863
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
EPSS Score
0.53%
43.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| SAP_SE | SAP NetWeaver AS for JAVA (Adobe Document Services) | ADSSSAP 7.50 |
Timeline
- Dec 10, 2024 CVE Published
- Dec 10, 2024 EPSS Score
- Dec 10, 2024 PoC Published
- Dec 10, 2024 PoC Published
- Dec 27, 2024 EPSS Score
- Jan 14, 2025 EPSS Score
- Jan 31, 2025 EPSS Score
- Feb 17, 2025 EPSS Score
- Mar 7, 2025 EPSS Score
- Mar 24, 2025 EPSS Score
- Apr 1, 2025 Coalition ESS Score
- Apr 10, 2025 EPSS Score