Vulnerabilidades do SAP SE SAP Landscape Transformation
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam SAP SE SAP Landscape Transformation: 2 registro(s), com versões afetadas e correções.
CVE-2026-27675
Baixa · 2.0
CWE-94 13/04/2026
Code Injection vulnerability in SAP Landscape Transformation
SAP Landscape Transformation contains a vulnerability in an RFC-exposed function module that could allow a high privileged adversary to inject arbitrary ABAP code and operating system commands. Due to this, some information could be modified, but the attacker does not have control over kind or degree. This leads to a low impact on integrity, while confidentiality and availability are not impacted.
CVE-2026-0491
Crítica · 9.1
CWE-94 12/01/2026
Code Injection vulnerability in SAP Landscape Transformation
SAP Landscape Transformation allows an attacker with admin privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code/OS commands into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating the risk of full system compromise, undermining the confidentiality, integrity and availability of the system.