SAP Patches Four CVSS 10.0 Flaws, Including Two Enabling Remote Code Execution

SAP has fixed four flaws that attackers could exploit without logging in, all rated 10.0, the maximum CVSS score, as part of its monthly Security Patch Day. Three of the flaws are in the SAP NetWeaver application server and one is in the Web Dispatcher, which receives web requests from the internet and passes them on to that server.