What is CVE-2024-47582?

CVE-2024-47582 is a medium-severity vulnerability in Sap_se Sap Netweaver As Java, classified under Improper Restriction of XML External Entity Reference (XXE). CVSS score: 5.3/10. Published 2024-12-10.

How severe is CVE-2024-47582?

Medium severity. CVSS v3 base score is 5.3 out of 10.

XXE in Sap_se Sap Netweaver As Java

CVE-2024-47582

Due to missing validation of XML input, an unauthenticated attacker could send malicious input to an endpoint which leads to XML Entity Expansion attack. This causes limited impact on availability of the application.

Vulnerability class: XXE (XML External Entity)

EPSS: 0.004 (33.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L.

Affected products

Sap_se Sap Netweaver As Java — versions LM-CORE 7.50

Weakness classification (CWE)

CWE-611 — Improper Restriction of XML External Entity Reference (XXE)

References

Frequently asked questions

What is CVE-2024-47582?: CVE-2024-47582 is a medium-severity vulnerability in Sap_se Sap Netweaver As Java, classified under Improper Restriction of XML External Entity Reference (XXE). CVSS score: 5.3/10. Published 2024-12-10.
How severe is CVE-2024-47582?: Medium severity. CVSS v3 base score is 5.3 out of 10.