Lucene search
K

51 matches found

NCSC
NCSC
added 2026/04/14 12:55 p.m.1 views

Vulnerabilities fixed in SAP products

SAP has fixed vulnerabilities in several SAP products, including SAP Supplier Relationship Management, SAP BusinessObjects Business Intelligence Platform, SAP NetWeaver Application Server Java and ABAP, SAP Landscape Transformation, SAP Business Planning and Consolidation, SAP Business Warehouse,...

9.9CVSS5.9AI score0.00108EPSS
Exploits2References1
NVD
NVD
added 2026/04/14 12:16 a.m.0 views

CVE-2026-27675

SAP Landscape Transformation contains a vulnerability in an RFC-exposed function module that could allow a high privileged adversary to inject arbitrary ABAP code and operating system commands. Due to this, some information could be modified, but the attacker does not have control over kind or...

2CVSS0.00033EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/14 12:7 a.m.1 views

CVE-2026-27675

SAP Landscape Transformation contains a vulnerability in an RFC-exposed function module that could allow a high privileged adversary to inject arbitrary ABAP code and operating system commands. Due to this, some information could be modified, but the attacker does not have control over kind or...

2CVSS6AI score0.00033EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2026/04/14 12:7 a.m.6 views

CVE-2026-27675

CVE-2026-27675 affects SAP Landscape Transformation via an RFC-exposed function module that could allow a high-privilege attacker to inject arbitrary ABAP code and operating-system commands. The described impact is limited: confidentiality and availability are unaffected, while integrity could be...

2CVSS6AI score0.00033EPSS
Exploits0References2
EUVD
EUVD
added 2026/04/14 12:7 a.m.0 views

EUVD-2026-22147

SAP Landscape Transformation contains a vulnerability in an RFC-exposed function module that could allow a high privileged adversary to inject arbitrary ABAP code and operating system commands. Due to this, some information could be modified, but the attacker does not have control over kind or...

2CVSS6AI score0.00033EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/04/14 12:7 a.m.0 views

CVE-2026-27675 Code Injection vulnerability in SAP Landscape Transformation

SAP Landscape Transformation contains a vulnerability in an RFC-exposed function module that could allow a high privileged adversary to inject arbitrary ABAP code and operating system commands. Due to this, some information could be modified, but the attacker does not have control over kind or...

2CVSS6AI score0.00033EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/04/14 12:7 a.m.24 views

CVE-2026-27675 Code Injection vulnerability in SAP Landscape Transformation

SAP Landscape Transformation contains a vulnerability in an RFC-exposed function module that could allow a high privileged adversary to inject arbitrary ABAP code and operating system commands. Due to this, some information could be modified, but the attacker does not have control over kind or...

2CVSS0.00033EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/04/14 12:0 a.m.1 views

PT-2026-32555

SAP Landscape Transformation contains a vulnerability in an RFC-exposed function module that could allow a high privileged adversary to inject arbitrary ABAP code and operating system commands. Due to this, some information could be modified, but the attacker does not have control over kind or...

2CVSS6AI score0.00033EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/01/14 1:22 a.m.2 views

CVE-2026-0491

SAP Landscape Transformation allows an attacker with admin privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code/OS commands into the system, bypassing essential authorization checks. This vulnerability effectively...

9.1CVSS7.4AI score0.00085EPSS
Exploits0References1
NVD
NVD
added 2026/01/13 2:15 a.m.4 views

CVE-2026-0491

SAP Landscape Transformation allows an attacker with admin privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code/OS commands into the system, bypassing essential authorization checks. This vulnerability effectively...

9.1CVSS0.00085EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/01/13 1:12 a.m.20 views

CVE-2026-0491 Code Injection vulnerability in SAP Landscape Transformation

SAP Landscape Transformation allows an attacker with admin privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code/OS commands into the system, bypassing essential authorization checks. This vulnerability effectively...

9.1CVSS0.00085EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/01/13 1:12 a.m.2 views

CVE-2026-0491 Code Injection vulnerability in SAP Landscape Transformation

SAP Landscape Transformation allows an attacker with admin privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code/OS commands into the system, bypassing essential authorization checks. This vulnerability effectively...

9.1CVSS7AI score0.00085EPSS
Exploits0References2
CVE
CVE
added 2026/01/13 1:12 a.m.14 views

CVE-2026-0491

CVE-2026-0491 affects SAP Landscape Transformation. A function module exposed via RFC allows an admin to inject arbitrary ABAP code or OS commands, bypassing authorization checks and potentially compromising confidentiality, integrity, and availability. The issue is described across multiple sour...

9.1CVSS7AI score0.00085EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/01/13 12:0 a.m.2 views

PT-2026-2327

Name of the Vulnerable Software and Affected Versions SAP Landscape Transformation affected versions not specified Description The software contains a flaw in a function module exposed via Remote Function Call RFC that allows an attacker with administrative privileges to inject arbitrary ABAP cod...

9.1CVSS6.8AI score0.00085EPSS
Exploits0References10
CNNVD
CNNVD
added 2026/01/13 12:0 a.m.1 views

SAP Landscape Transformation 代码注入漏洞

SAP Landscape Transformation is a tool for system data migration and integration from SAP, Germany. SAP Landscape Transformation suffers from a code injection vulnerability that originates from an attacker being able to inject arbitrary ABAP code or OS commands via RFC-exposed function modules,...

9.1CVSS6.2AI score0.00085EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-24206

Malicious code in bioql PyPI...

9.9CVSS6.7AI score0.00139EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-14338

Malicious code in bioql PyPI...

7.7CVSS6.4AI score0.00189EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/09/09 2:10 a.m.1 views

CVE-2025-42929 Missing input validation vulnerability in SAP Landscape Transformation Replication Server

Due to missing input validation, an attacker with high privilege access to ABAP reports could delete the content of arbitrary database tables, if the tables are not protected by an authorization group. This leads to a high impact on integrity and availability of the database...

8.1CVSS6.4AI score0.00041EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/09/09 12:0 a.m.1 views

SAP Landscape Transformation Replication Server 安全漏洞

SAP Landscape Transformation Replication Server is a data replication and transformation tool from SAP, Germany. A security vulnerability exists in SAP Landscape Transformation Replication Server that stems from a lack of input validation and could lead an attacker to delete database table conten...

8.1CVSS6.4AI score0.00041EPSS
Exploits0References2
NCSC
NCSC
added 2025/09/05 11:12 a.m.6 views

Vulnerabilities fixed in SAP products

SAP has fixed vulnerabilities in several products, including in SAP NetWeaver Application Server ABAP, SAP S/4HANA, SAP Landscape Transformation and AP Cloud Connector. The vulnerabilities include circumvention of authorization controls, Cross-Site Scripting XSS and a Directory Traversal...

9.9CVSS7AI score0.00236EPSS
Exploits0References1
Rows per page
Query Builder