SAP patches four CVSS 10.0 flaws in NetWeaver and Web Dispatcher
SAP released critical patches for four maximum-severity flaws in NetWeaver application server and Web Dispatcher, all rated CVSS 10.0. Two flaws enable unauthenticated remote code execution. These vulnerabilities are exploitable without authentication, affecting widely deployed enterprise software. Organizations running SAP systems should apply patches immediately as exploitation risk is extremely high.