- EPSS 0.03%
- Veröffentlicht 14.04.2026 00:07:01
- Zuletzt bearbeitet 17.04.2026 15:18:16
SAP Landscape Transformation contains a vulnerability in an RFC-exposed function module that could allow a high privileged adversary to inject arbitrary ABAP code and operating system commands. Due to this, some information could be modified, but the...
CVE-2026-0491
- EPSS 0.09%
- Veröffentlicht 13.01.2026 01:12:53
- Zuletzt bearbeitet 15.04.2026 00:35:42
SAP Landscape Transformation allows an attacker with admin privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code/OS commands into the system, bypassing essential authoriza...
CVE-2025-42950
- EPSS 0.13%
- Veröffentlicht 12.08.2025 02:08:36
- Zuletzt bearbeitet 15.04.2026 00:35:42
SAP Landscape Transformation (SLT) allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization ch...
CVE-2025-43011
- EPSS 0.19%
- Veröffentlicht 13.05.2025 00:20:02
- Zuletzt bearbeitet 15.04.2026 00:35:42
Under certain conditions, SAP Landscape Transformation's PCL Basis module does not perform the necessary authorization checks, allowing authenticated users to access restricted functionalities or data. This can lead to a high impact on confidentialit...
CVE-2025-31330
- EPSS 0.39%
- Veröffentlicht 08.04.2025 07:15:13
- Zuletzt bearbeitet 15.04.2026 00:35:42
SAP Landscape Transformation (SLT) allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization ch...
- EPSS 0.72%
- Veröffentlicht 14.09.2021 12:15:11
- Zuletzt bearbeitet 21.11.2024 06:16:34
Due to improper input sanitization, an authenticated user with certain specific privileges can remotely call NZDT function modules listed in Solution Section to execute manipulated query or inject ABAP code to gain access to Backend Database. On succ...