SAP Netweaver version 7.40 SP 12 suffers from an OS command injection vulnerability in SCTC_REORG_SPOOL. Continue reading...