CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2010-5326

The Invoker Servlet on SAP NetWeaver Application Server Java platforms, possibly before 7.3, does not require authentication, which allows remote attackers to execute arbitrary code via an HTTP or HTTPS request, as exploited in the wild in 2013 through 2016, aka a "Detour" attack.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.264

EPSS Ranking 96.0%

CVSS Severity

CVSS v3 Score 10.0

CVSS v2 Score 10.0

Proposed Action

SAP NetWeaver Application Server Java Platforms Invoker Servlet does not require authentication, allowing for remote code execution via a HTTP or HTTPS request.

Ransomware Campaign

Unknown

References

Products affected by CVE-2010-5326

Sap » Netweaver Application Server Java » Version: N/A

cpe:2.3:a:sap:netweaver_application_server_java:-
Sap » Netweaver Application Server Java » Version: 7.00

cpe:2.3:a:sap:netweaver_application_server_java:7.00
Sap » Netweaver Application Server Java » Version: 7.01

cpe:2.3:a:sap:netweaver_application_server_java:7.01
Sap » Netweaver Application Server Java » Version: 7.02

cpe:2.3:a:sap:netweaver_application_server_java:7.02
Sap » Netweaver Application Server Java » Version: 7.05

cpe:2.3:a:sap:netweaver_application_server_java:7.05
Sap » Netweaver Application Server Java » Version: 7.1

cpe:2.3:a:sap:netweaver_application_server_java:7.1
Sap » Netweaver Application Server Java » Version: 7.10

cpe:2.3:a:sap:netweaver_application_server_java:7.10
Sap » Netweaver Application Server Java » Version: 7.11

cpe:2.3:a:sap:netweaver_application_server_java:7.11
Sap » Netweaver Application Server Java » Version: 7.2

cpe:2.3:a:sap:netweaver_application_server_java:7.2
Sap » Netweaver Application Server Java » Version: 7.20

cpe:2.3:a:sap:netweaver_application_server_java:7.20
Sap » Netweaver Application Server Java » Version: 7.21

cpe:2.3:a:sap:netweaver_application_server_java:7.21
Sap » Netweaver Application Server Java » Version: 7.22

cpe:2.3:a:sap:netweaver_application_server_java:7.22
Sap » Netweaver Application Server Java » Version: 7.3

cpe:2.3:a:sap:netweaver_application_server_java:7.3
Sap » Netweaver Application Server Java » Version: 7.30

cpe:2.3:a:sap:netweaver_application_server_java:7.30
Sap » Netweaver Application Server Java » Version: 7.4

cpe:2.3:a:sap:netweaver_application_server_java:7.4
Sap » Netweaver Application Server Java » Version: 7.5

cpe:2.3:a:sap:netweaver_application_server_java:7.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2010-5326

Products

Pricing

Contact Us