thumbnail SAP fixes maximum severity NetWeaver command execution flaw