SAP NetWeaver Portal is prone to a remote code-execution vulnerability. Successfully exploiting these issues may allow an attacker to execute arbitrary code with the privileges of the user running the affected application.

• http://erpscan.com/wp-content/uploads/2012/11/Breaking-SAP-Portal-HackerHalted-2012.pdf
• http://www.exploit-db.com/exploits/24963/

---

Updated on 2015-03-25