2026年11月10日 5:02 ET 发布 · 更新于 4 天前 · 1 个来源

SAP Patches Four CVSS 10.0 Flaws, Including Two Enabling Remote Code Execution

The Hacker News
The Hacker News
·
原始报道
INFERY
SAP Patches Four CVSS 10.0 Flaws, Including Two Enabling Remote Code Execution

Four flaws that attackers could exploit without logging in were fixed today as part of SAP's monthly Security Patch Day—the vendor rates all four 10.0, the maximum CVSS score. Three are in the SAP NetWeaver application server, the software SAP systems run on, and one is in the Web Dispatcher, which receives web requests from the internet and passes them on to that server. The flaws in the Web

原文