Sap Se Sap Landscape Transformation vulnerabilities

CVE-2026-27675 [LOW] CWE-94 CVE-2026-27675: SAP Landscape Transformation contains a vulnerability in an RFC-exposed function module that could a SAP Landscape Transformation contains a vulnerability in an RFC-exposed function module that could allow a high privileged adversary to inject arbitrary ABAP code and operating system commands. Due to this, some information could be modified, but the attacker does not have control over kind or degree. This leads to a low impact on integrity, while confi

CVE-2026-0491 [CRITICAL] CWE-94 CVE-2026-0491: SAP Landscape Transformation allows an attacker with admin privileges to exploit a vulnerability in SAP Landscape Transformation allows an attacker with admin privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code/OS commands into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating the risk of full system c

CVE-2025-42950 [CRITICAL] CWE-94 CVE-2025-42950: SAP Landscape Transformation (SLT) allows an attacker with user privileges to exploit a vulnerabilit SAP Landscape Transformation (SLT) allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating the risk of full system compr

CVE-2025-43011 [HIGH] CWE-862 CVE-2025-43011: Under certain conditions, SAP Landscape Transformation's PCL Basis module does not perform the neces Under certain conditions, SAP Landscape Transformation's PCL Basis module does not perform the necessary authorization checks, allowing authenticated users to access restricted functionalities or data. This can lead to a high impact on confidentiality with no impact on the integrity or availability of the application.

CVE-2025-31330 [CRITICAL] CWE-94 CVE-2025-31330: SAP Landscape Transformation (SLT) allows an attacker with user privileges to exploit a vulnerabilit SAP Landscape Transformation (SLT) allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating the risk of full system compr

CVE-2021-38176 [HIGH] CWE-89 CVE-2021-38176: Due to improper input sanitization, an authenticated user with certain specific privileges can remot Due to improper input sanitization, an authenticated user with certain specific privileges can remotely call NZDT function modules listed in Solution Section to execute manipulated query or inject ABAP code to gain access to Backend Database. On successful exploitation the threat actor could completely compromise confidentiality, integrity, and availab