CVE-2010-5326 — SAP NetWeaver Remote Code Execution Vulnerability

CISA KEVExploited: confirmedSAP

SAP NetWeaver Application Server Java Platforms Invoker Servlet does not require authentication, allowing for remote code execution via a HTTP or HTTPS request.

Vulnerability details

Affected productsNetWeaver
KEV remediation due2022-05-03