CVE-2024-47576

SAP Product Lifecycle Costing Client (versions below 4.7.1) application loads on demand a DLL that is available with Windows OS. This DLL is loaded from the computer running SAP Product Lifecycle Costing Client application. That particular DLL could be replaced by a malicious one, that could execute commands as being part of SAP Product Lifecycle Costing Client Application. On a successful attack, it can cause a low impact to confidentiality but no impact to the integrity and availability of the application.

• CWE-427

• https://me.sap.com/notes/3504847
• https://url.sap/sapsecuritypatchday

Published

Dec 10, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-47570An insertion of sensitive information into log file vulnerab…6.6
• CVE-2024-47571An operation on a resource after expiration or release in Fo…9.8
• CVE-2024-47572An improper neutralization of formula elements in a csv file…8
• CVE-2024-47573An improper validation of integrity check value vulnerabilit…6.5
• CVE-2024-47574A authentication bypass using an alternate path or channel i…7.8
• CVE-2024-47575A missing authentication for critical function in FortiManag…9.8
• CVE-2024-47577Webservice API endpoints for Assisted Service Module within …2.7
• CVE-2024-47578Adobe Document Service allows an attacker with administrator…9.1
• CVE-2024-47579An attacker authenticated as an administrator can use an exp…6.8
• CVE-2024-4758The Muslim Prayer Time BD WordPress plugin through 2.4 does …7.6
• CVE-2024-47580An attacker authenticated as an administrator can use an exp…6.8
• CVE-2024-47581SAP HCM Approve Timesheets Version 4 application does not pe…4.3