PT-2025-15376 · Sap · Sap Landscape Transformation

Published

2025-04-08

·

Updated

2025-04-24

·

CVE-2025-31330

CVSS v3.1

9.9

Critical

VectorAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: SAP Landscape Transformation (SLT) (affected versions not specified)
Description: The issue allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC, enabling the injection of arbitrary ABAP code into the system and bypassing essential authorization checks. This vulnerability functions as a backdoor, creating the risk of full system compromise and undermining the system's confidentiality, integrity, and availability.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

BDU:2025-06365
CVE-2025-31330

Affected Products

Sap Landscape Transformation