CVE-2026-27675
Code Injection vulnerability in SAP Landscape Transformation
CVSS Score
2.0
EPSS Score
0.0%
EPSS Percentile
8th
SAP Landscape Transformation contains a vulnerability in an RFC-exposed function module that could allow a high privileged adversary to inject arbitrary ABAP code and operating system commands. Due to this, some information could be modified, but the attacker does not have control over kind or degree. This leads to a low impact on integrity, while confidentiality and availability are not impacted.
| Vendor | sap_se |
| Product | sap landscape transformation |
| Published | Apr 14, 2026 |
| Last Updated | Apr 14, 2026 |
Stay Ahead of the Next One
Get instant alerts for sap_se sap landscape transformation
Be the first to know when new low vulnerabilities affecting sap_se sap landscape transformation are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N Attack Vector
Network
Attack Complexity
High
Privileges Required
High
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
None
Affected Versions
SAP_SE / SAP Landscape Transformation
DMIS 2011_1_700 2011_1_710 2011_1_730 2011_1_731 2011_1_752 2020 S4CORE 102 103 104 105 106 107 108 109