Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Unauthenticated attackers can exploit a weakness in the XML parser functionality of the SOAP endpoints in 4D server. This allows them to obtain read access to files on the application server and adjacent network shares, and perform HTTP GET requests to arbitrary services.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-04-30 | 1 | General1 |
| 2026-05-29 | 1 | Patch1 |
🚨 HIGH: CVE-2024-39847 (CVSS 7.5) - Unauthenticated XXE in 4D Server SOAP endpoints allows file read access & SSRF. No authentication required. Patch immediately. #CVE #PatchNow #ThreatIntel https://t.co/nHaAIxC97J
Post summary
CVE-2024-39847 is a high‑severity unauthenticated XML External Entity (XXE) vulnerability in 4D Server SOAP endpoints, allowing file read and SSRF; immediate patching is recommended.
CVE-2024-39847 Unauthenticated XML Parser Vulnerability in 4D Server SOAP Endpoi... https://vulmon.com/vulnerabilitydetails?qid=CVE-2024-39847 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
The tweet merely announces CVE‑2024‑39847 and links to a details page, providing no PoC, exploit, patch, or evidence of active exploitation.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | 4d | server | 20 | - | - |
| App | 4d | server | 20 | - | - |
| App | 4d | server | 20 | - | - |