Read the docs
TI-2024-26759 Aliases CVE-2024-39847GHSA-xwqq-pcg2-pphr

Arbitrary File Read and Server Side Request Forgery via XML External Entities in 4D Server SOAP

Priority MEDIUM 44CWE-611Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-611 and the CVSS impact.

Summary

Unauthenticated attackers can exploit a weakness in the XML parser functionality of the SOAP endpoints in 4D server. This allows them to obtain read access to files on the application server and adjacent network shares, and perform HTTP GET requests to arbitrary services.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00447 39th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed 4D Server (4D): v20 R7

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
4D4D Serverup to v20 R3v20 R7Patch availableCNA
  • 4D Server Vendor4D Affected up to v20 R3 Fixed in v20 R7 Patch available CNA

CPE configurations NVD · 3

CPEVersionsRoleVendor
cpe:2.3:a:4d:server:20:r3:*:*:*:*:*:*20 r3Vulnerable4D
cpe:2.3:a:4d:server:20:r4:*:*:*:*:*:*20 r4Vulnerable4D
cpe:2.3:a:4d:server:20:r6:*:*:*:*:*:*20 r6Vulnerable4D
  • cpe:2.3:a:4d:server:20:r3:*:*:*:*:*:* Versions 20 r3 Vulnerable ·4D
  • cpe:2.3:a:4d:server:20:r4:*:*:*:*:*:* Versions 20 r4 Vulnerable ·4D
  • cpe:2.3:a:4d:server:20:r6:*:*:*:*:*:* Versions 20 r6 Vulnerable ·4D

Remediation

  • Fix · CNA 4D Server (4D) Fixed in v20 R7

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-39847
  2. 2026-10-03 Alias added: GHSA-xwqq-pcg2-pphr

References

Exploit 1

Other 1

  • TI-2023-14183 A broken authentication vulnerability in 4D SAS 4D Server software v17, v18, v19 R7, and… CVSS 3.1HIGH 7.5
  • TI-2023-14182 An information disclosure vulnerability in 4D SAS 4D Server Application v17, v18, v19 R7… CVSS 3.1HIGH 7.5
  • TI-2023-04397 Uncontrolled Search Path Element Vulnerability in 4D and 4D Windows Server CVSS 3.1HIGH 7.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences