CVE-2024-47580: SAP SE SAP NetWeaver As For Java Adobe Document Services

Medium severity, CVSS 6.8. EPSS: 0.5% chance of exploitation in the next 30 days.

An attacker authenticated as an administrator can use an exposed webservice to create a PDF with an embedded attachment. By specifying the file to be an internal server file and subsequently downloading the generated PDF, the attacker can read any file on the server with no effect on integrity or availability.

Affected products

• SAP SE SAP NetWeaver As For Java Adobe Document Services

Published 2024-12-10. Last modified 2026-06-17.