CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2016-05-13
SAP NetWeaver Java Application Server Invoker Servlet Authentication Bypass Remote Code Execution (CVE-2010-5326)
[Affected Scope] SAP NetWeaver Application Server Java platforms, typically prior to version 7.3
[Impact] Unauthenticated remote attackers can execute arbitrary OS commands and Java code via crafted HTTP/HTTPS requests (CVSS 10.0)
[Mitigation] Apply SAP Note 1445998 and disable the Invoker Servlet globally in the web.xml configuration