CVE-2024-47588: SAP SE SAP NetWeaver Java Software Update Manager

Medium severity, CVSS 4.7. EPSS: 0.1% chance of exploitation in the next 30 days.

In SAP NetWeaver Java (Software Update Manager 1.1), under certain conditions when a software upgrade encounters errors, credentials are written in plaintext to a log file. An attacker with local access to the server, authenticated as a non-administrative user, can acquire the credentials from the logs. This leads to a high impact on confidentiality, with no impact on integrity or availability.

Affected products

• SAP SE SAP NetWeaver Java Software Update Manager

Published 2024-11-12. Last modified 2026-06-17.