CVE-2024-47578

Adobe Document Service allows an attacker with administrator privileges to send a crafted request from a vulnerable web application. It is usually used to target internal systems behind firewalls that are normally inaccessible to an attacker from the external network, resulting in a Server-Side Request Forgery vulnerability. On successful exploitation, the attacker can read or modify any file and/or make the entire system unavailable.

• CWE-918

• https://me.sap.com/notes/3536965
• https://url.sap/sapsecuritypatchday

Published

Dec 10, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-47572An improper neutralization of formula elements in a csv file…8
• CVE-2024-47573An improper validation of integrity check value vulnerabilit…6.5
• CVE-2024-47574A authentication bypass using an alternate path or channel i…7.8
• CVE-2024-47575A missing authentication for critical function in FortiManag…9.8
• CVE-2024-47576SAP Product Lifecycle Costing Client (versions below 4.7.1) …3.3
• CVE-2024-47577Webservice API endpoints for Assisted Service Module within …2.7
• CVE-2024-47579An attacker authenticated as an administrator can use an exp…6.8
• CVE-2024-4758The Muslim Prayer Time BD WordPress plugin through 2.4 does …7.6
• CVE-2024-47580An attacker authenticated as an administrator can use an exp…6.8
• CVE-2024-47581SAP HCM Approve Timesheets Version 4 application does not pe…4.3
• CVE-2024-47582Due to missing validation of XML input, an unauthenticated a…5.3
• CVE-2024-47585SAP NetWeaver Application Server for ABAP and ABAP Platform …4.3