The GetComputerSystem method in the HostControl service in SAP Netweaver 7.03 allows remote attackers to obtain sensitive information via a crafted SOAP request to TCP port 1128.
https://service.sap.com/sap/support/notes/1816536
https://exchange.xforce.ibmcloud.com/vulnerabilities/85905
http://secunia.com/advisories/54277