SAP NetWeaver contains a vulnerability where it fails to perform necessary authorization checks and lacks sufficient input validation in certain remote-enabled functionality. This flaw allows an attacker with low privileges to send specially crafted input through a remote interface to inject and execute arbitrary code. Exploitation could lead to a significant compromise of confidentiality, integrity, and availability of the affected system.