SAP: SAP patches zero-day vulnerability in NetWeaver, denies exploitation

SAP has released emergency patches for a critical zero-day vulnerability in NetWeaver. The security flaw allows malicious files to be uploaded to the system without authentication. This makes it possible to gain control over servers, although SAP denies that customers have been affected. Nothing could be further from the truth, if two independent security teams [...]