CVE-2024-47582

published 2024-12-10

CVE-2024-47582: Due to missing validation of XML input, an unauthenticated attacker could send malicious input to an endpoint which leads to XML Entity Expansion attack. This…

Priority P4 30 medium 5.3 CVSS 3.1

AV N AC L PR N UI N S U C N I N A L

Due to missing validation of XML input, an unauthenticated attacker could send malicious input to an endpoint which leads to XML Entity Expansion attack. This causes limited impact on availability of the application.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
sap_se	sap_netweaver_as_java	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-611