SAP Netweaver version 7.40 SP 12 suffers from an OS command injection vulnerability in SCTC_REFRESH_IMPORT_USR_CLNT. Continue reading...