Sap Landscape Transformation
Approved changes feed: RSS · Atom
cpe:2.3:a:sap_se:sap_landscape_transformation:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap Se (f8f3f5db-c060-5230-a8bd-f91674203607) |
|---|---|
| Product | Sap Landscape Transformation (1420b7f7-c58d-5fe7-8b19-0688c11febf8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-27675 |
vulnerable | 2026-06-08 07:53:22.864548 |
Code Injection vulnerability in SAP Landscape Transformation
LOW (2)
SAP Landscape Transformation contains a vulnerability in an RFC-exposed function module that could allow a high privileged adversary to inject arbitrary ABAP code and operating system commands. Due to this, some information could be modified, but the attacker does not have control over kind or degree. This leads to a low impact on integrity, while confidentiality and availability are not impacted.
Published: 2026-04-14T00:07:01.278Z
Updated: 2026-04-14T13:14:18.764Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0491 |
vulnerable | 2026-06-08 07:47:12.388707 |
Code Injection vulnerability in SAP Landscape Transformation
CRITICAL (9.1)
SAP Landscape Transformation allows an attacker with admin privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code/OS commands into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating the risk of full system compromise, undermining the confidentiality, integrity and availability of the system.
Published: 2026-01-13T01:12:53.331Z
Updated: 2026-02-26T15:04:49.849Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38176 |
vulnerable | 2026-06-08 05:32:55.616269 |
Details available
CRITICAL (9.9)
Due to improper input sanitization, an authenticated user with certain specific privileges can remotely call NZDT function modules listed in Solution Section to execute manipulated query or inject ABAP code to gain access to Backend Database. On successful exploitation the threat actor could completely compromise confidentiality, integrity, and availability of the system.
Published: 2021-09-14T11:19:07.000Z
Updated: 2024-08-04T01:37:16.300Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.