CVE-2024-47582: XML Entity Expansion Vulnerability in SAP NetWeaver AS JAVA
Published Dec 10, 2024
·Updated
Due to missing validation of XML input, an unauthenticated attacker could send malicious input to an endpoint which leads to XML Entity Expansion attack. This causes limited impact on availability of the application.
Affected Software
1 affected component
SAP NetWeaver AS Java
Event History
Dec 10, 2024
CVE Published
via MITRE·12:12 AM
Data Sourced
via MITRE·12:12 AM
DescriptionSeverity
Data Sourced
via NVD·01:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-47582?
CVE-2024-47582 is rated as having limited impact, primarily affecting application availability.
2
How do I fix CVE-2024-47582?
To address CVE-2024-47582, validate and sanitize XML input to prevent XML Entity Expansion attacks.
3
Which software is affected by CVE-2024-47582?
CVE-2024-47582 affects the SAP NetWeaver AS JAVA product.
4
Can CVE-2024-47582 be exploited by authenticated users?
No, CVE-2024-47582 can be exploited by unauthenticated attackers.
5
What type of attack is associated with CVE-2024-47582?
CVE-2024-47582 is associated with XML Entity Expansion attacks due to missing validation of XML input.