Sap Netweaver As For Java (Adobe Document Services)
Approved changes feed: RSS · Atom
cpe:2.3:a:sap_se:sap_netweaver_as_for_java_(adobe_document_services):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap Se (f8f3f5db-c060-5230-a8bd-f91674203607) |
|---|---|
| Product | Sap Netweaver As For Java (Adobe Document Services) (b1efc136-a1a1-59b0-a40c-86808c0b6150) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-47580 |
vulnerable | 2026-06-08 06:48:12.890024 |
Multiple vulnerabilities in SAP NetWeaver AS for JAVA(Adobe Document Services)
MEDIUM (6.8)
An attacker authenticated as an administrator can use an exposed webservice to create a PDF with an embedded attachment. By specifying the file to be an internal server file and subsequently downloading the generated PDF, the attacker can read any file on the server with no effect on integrity or availability.
Published: 2024-12-10T00:12:11.655Z
Updated: 2024-12-16T19:16:09.928Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47579 |
vulnerable | 2026-06-08 06:48:12.889656 |
Multiple vulnerabilities in SAP NetWeaver AS for JAVA(Adobe Document Services)
MEDIUM (6.8)
An attacker authenticated as an administrator can use an exposed webservice to upload or download a custom PDF font file on the system server. Using the upload functionality to copy an internal file into a font file and subsequently using the download functionality to retrieve that file allows the attacker to read any file on the server with no effect on integrity or availability
Published: 2024-12-10T00:12:05.039Z
Updated: 2024-12-16T19:16:35.048Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47578 |
vulnerable | 2026-06-08 06:48:12.889184 |
Multiple vulnerabilities in SAP NetWeaver AS for JAVA(Adobe Document Services)
CRITICAL (9.1)
Adobe Document Service allows an attacker with administrator privileges to send a crafted request from a vulnerable web application. It is usually used to target internal systems behind firewalls that are normally inaccessible to an attacker from the external network, resulting in a Server-Side Request Forgery vulnerability. On successful exploitation, the attacker can read or modify any file and/or make the entire system unavailable.
Published: 2024-12-10T00:11:57.435Z
Updated: 2024-12-10T17:15:02.722Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.