[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNu7YO2W9_pXAyAQt6ShM8VcBjgrVdhzj0HBReaoeNls":3,"g5a-risk:CVE-2010-5326":153},{"success":4,"data":5,"meta":151},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":43,"epssPercentile":27,"epssTimeSeries":44,"severity":45,"affectedProducts":46,"affectedProductsCount":52,"references":53,"referencesCount":97,"weaknesses":98,"weaknessesCount":52,"isActivelyExploited":4,"cisaInfo":106,"otxData":27,"relatedBlogPosts":107,"seoMetadata":108,"configurations":133,"relatedVendorCves":142,"notableEvents":143},"CVE-2010-5326","What is CVE-2010-5326?","The Invoker Servlet on SAP NetWeaver Application Server Java platforms, possibly before 7.3, does not require authentication, which allows remote attackers to execute arbitrary code via an HTTP or HTTPS request, as exploited in the wild in 2013 through 2016, aka a \"Detour\" attack.","The Invoker Servlet on SAP NetWeaver Application Server Java platforms, possibly before 7.3, does not require authentication, which allows remote attackers t...","2016-05-13T10:59:00.173","2025-10-22T00:15:38.523",10,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":34,"CVSSMetricV2":35,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","CHANGED","HIGH","CRITICAL",null,3.9,6,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[],[36],{"Source":17,"Type":18,"CVSSData":37,"BaseSeverity":25,"ExploitabilityScore":12,"ImpactScore":12,"ACInsufInfo":4,"ObtainAllPrivilege":42,"ObtainUserPrivilege":42,"ObtainOtherPrivilege":42,"UserInteractionRequired":42},{"Version":38,"VectorString":39,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":40,"IntegrityImpact":40,"AvailabilityImpact":40,"BaseScore":12,"BaseSeverity":41,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","COMPLETE","",false,0.1777,[43,43,43,43,43,43,43],"Critical",[47],{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"sap","netweaver_application_server_java","*","cpe:2.3:a:sap:netweaver_application_server_java:*:*:*:*:*:*:*:*",1,[54,59,64,70,73,78,81,83,85,87,89,91,93],{"url":55,"source":56,"tags":57},"http:\u002F\u002Fservice.sap.com\u002Fsap\u002Fsupport\u002Fnotes\u002F1445998","Sap",[58],"Permissions Required",{"url":60,"source":61,"tags":62},"http:\u002F\u002Fwww.onapsis.com\u002Fresearch\u002Fpublications\u002Fsap-security-in-depth-vol4-the-invoker-servlet-a-dangerous-detour-into-sap-java-solutions","Onapsis",[63],"Broken Link",{"url":65,"source":66,"tags":67},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F48925","Securityfocus",[68,69],"Third Party Advisory","VDB Entry",{"url":71,"source":66,"tags":72},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F90533",[68,69],{"url":74,"source":75,"tags":76},"http:\u002F\u002Fwww.us-cert.gov\u002Fncas\u002Falerts\u002FTA16-132A","Us-cert",[68,77],"US Government Resource",{"url":79,"source":61,"tags":80},"https:\u002F\u002Fwww.onapsis.com\u002Fthreat-report-tip-iceberg-wild-exploitation-cyber-attacks-sap-business-applications",[68],{"url":55,"source":56,"tags":82},[58],{"url":60,"source":61,"tags":84},[63],{"url":65,"source":66,"tags":86},[68,69],{"url":71,"source":66,"tags":88},[68,69],{"url":74,"source":75,"tags":90},[68,77],{"url":79,"source":61,"tags":92},[68],{"url":94,"source":95,"tags":96},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2010-5326","CISA",[],13,[99],{"id":100,"name":101,"description":102,"extendedDescription":41,"status":103,"abstraction":104,"structure":105},"CWE-306","Missing Authentication for Critical Function","The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.","Draft","Base","Simple",{"shortDescription":41,"requiredAction":41,"vulnerabilityName":41,"dateAdded":27},[],{"title":109,"metaDescription":110,"keywords":111,"canonicalUrl":112,"structuredData":113},"What is CVE-2010-5326? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2010-5326, a critical severity cyber security vulnerability from 2016. The Invoker Servlet on SAP NetWeaver Application Server ...","CVE-2010-5326, CVE-2010-5326 vulnerability, CVE-2010-5326 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2016, CVSS score, exploit, patch, remediation, sap security, netweaver_application_server_java vulnerability","\u002Fwhat-is\u002Fcve-2010-5326",{"@context":114,"@type":115,"headline":109,"description":110,"datePublished":10,"dateModified":11,"author":116,"publisher":120,"about":124,"mainEntityOfPage":128,"articleSection":131,"keywords":132},"https:\u002F\u002Fschema.org","TechArticle",{"@type":117,"name":118,"url":119},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":117,"name":118,"url":119,"logo":121},{"@type":122,"url":123},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":125,"name":6,"description":126,"additionalType":127},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":129,"@id":130},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2010-5326","Cybersecurity","CVE-2010-5326, CVE-2010-5326 vulnerability, CVE-2010-5326 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[134],{"Operator":27,"Negate":27,"Nodes":135},[136],{"Operator":137,"Negate":42,"CPEMatch":138},"OR",[139],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":140,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":141},"8A2EBD07-4989-4F26-A3B4-D5D2070B6998","7.30",[],[144],{"id":145,"eventType":146,"eventTime":147,"details":148,"label":149,"color":150},"b7968c73-4114-414a-b420-a1f374918bf5","LOW_EPSS_DELTA","2025-12-04T04:06:40.839523+00:00","Daily EPSS score decreased by 0.110 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":152,"version":38},1792362733951,{"score":154,"band":45,"action":155,"scoredAt":156},88,"Emergency patch","2026-10-17T07:57:17.212131+00:00"]