Riskcovery

CVE-2026-27675

Code Injection vulnerability in SAP Landscape Transformation

State
Published
Severity
2.0 Low
Published
Apr 14, 2026
Updated
Apr 14, 2026
Reserved
Feb 23, 2026

Read the record on cve.org

Description

SAP Landscape Transformation contains a vulnerability in an RFC-exposed function module that could allow a high privileged adversary to inject arbitrary ABAP code and operating system commands. Due to this, some information could be modified, but the attacker does not have control over kind or degree. This leads to a low impact on integrity, while confidentiality and availability are not impacted.

Scores

CVSSScoreVectorSource
3.12.0 LowCVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:Nsap

Weaknesses

  • CWE-94 Improper Control of Generation of Code

Affected Products

ProductVersions
SAP Landscape TransformationSAP_SE
  • DMIS 2011_1_700Affected
  • 2011_1_710Affected
  • 2011_1_730Affected
  • 2011_1_731Affected
  • 2011_1_752Affected
  • 2020Affected
  • S4CORE 102Affected
  • 103Affected
  • 104Affected
  • 105Affected
  • 106Affected
  • 107Affected
  • 108Affected
  • 109Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.