CVE-2024-47576: SAP SE SAP Product Lifecycle Costing

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

SAP Product Lifecycle Costing Client (versions below 4.7.1) application loads on demand a DLL that is available with Windows OS. This DLL is loaded from the computer running SAP Product Lifecycle Costing Client application. That particular DLL could be replaced by a malicious one, that could execute commands as being part of SAP Product Lifecycle Costing Client Application. On a successful attack, it can cause a low impact to confidentiality but no impact to the integrity and availability of the application.

Affected products

• SAP SE SAP Product Lifecycle Costing

Published 2024-12-10. Last modified 2026-06-17.