CVE-2010-4556: SAP NetWeaver Business Client

High severity, CVSS 9.3. EPSS: 6.1% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the SapThemeRepository ActiveX control (sapwdpcd.dll) in SAP NetWeaver Business Client allows remote attackers to execute arbitrary code via the (1) Load and (2) LoadTheme methods.

Affected products

• SAP NetWeaver Business Client: any version

Published 2010-12-17. Last modified 2026-06-16.