SAP SE SAP Landscape Transformation vulnerabilities
3 vulnerabilities
Known vulnerabilities in SAP SE SAP Landscape Transformation, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CriticalCVE-2021-38176sap_se · sap landscape transformation +8 moresap_se sap landscape transformationDue to improper input sanitization, an authenticated user with certain specific privileges can remotely call NZDT function modules listed in Solution Section to execute manipulated query or inject ABAP code to gain access to Backend Database. On successful exploitation the threat actor could completely compromise confidentiality, integrity, and availability of the system.EPSS1.27%CriticalCVE-2026-0491sap_se · sap landscape transformationCode Injection vulnerability in SAP Landscape TransformationSAP Landscape Transformation allows an attacker with admin privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code/OS commands into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating the risk of full system compromise, undermining the confidentiality, integrity and availability of the system.EPSS0.52%LowCVE-2026-27675sap_se · sap landscape transformationCode Injection vulnerability in SAP Landscape TransformationSAP Landscape Transformation contains a vulnerability in an RFC-exposed function module that could allow a high privileged adversary to inject arbitrary ABAP code and operating system commands. Due to this, some information could be modified, but the attacker does not have control over kind or degree. This leads to a low impact on integrity, while confidentiality and availability are not impacted.EPSS0.24%