Cybersecurity Alerts

SAP NetWeaver Remote Code Execution Vulnerability

SAP NetWeaver Application Server Java Platforms Invoker Servlet does not require authentication, allowing for remote code execution via a HTTP or HTTPS request.

Required Action

Apply updates per vendor instructions.

References

• https://nvd.nist.gov/vuln/detail/CVE-2010-5326