SAP fixed Post-Auth RCE (CVE-2021-38163) in SAP NetWeaver found by our researcher Mikhail Klyuchnikov. CVSS 9.9 No credits from SAP again. Advisory: https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405 516 viewsedited 14:21