SAP NetWeaver Application Server Java Systems Invoker Servlet Vulnerability

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

  Severity: CRITICAL

  Advisory Date: MAY 31, 2016

---

  DESCRIPTION

SAP NetWeaver is prone to remote command execution vulnerability. The vulnerability get exploited by using invoker servlet, which allows attacker to access servlet on the running application without authentication and authorization.

  TREND MICRO PROTECTION INFORMATION

Apply associated Trend Micro DPI Rules.

  SOLUTION

  Trend Micro Deep Security DPI Rule Number: 1007639