CVE-2010-5326SAP NetWeaver Remote Code Execution Vulnerability

PUBLISHEDvulnerability record
2021-11-03 · last modified June 21, 2025

Metadata

CVE ID:
CVE-2010-5326
项目:
SAP
产品:
NetWeaver
添加日期:
2021-11-03
到期日:
2022-05-03
最后更新:
June 21, 2025

漏洞名称

SAP NetWeaver Remote Code Execution Vulnerability

描述

SAP NetWeaver Application Server Java Platforms Invoker Servlet does not require authentication, allowing for remote code execution via a HTTP or HTTPS request.

已知用于勒索软件活动吗?

勒索软件状态:
Unknown

采集行动

Apply updates per vendor instructions.

其他说明