Skip to content
OpenAdvisories
Critical · 9.9 CVE-2025-42950 EUVD-2025-24206GHSA-48hj-8597-5m47

Code Injection Vulnerability in SAP Landscape Transformation (Analysis Platform)

Published Aug 12, 2025 · Updated Feb 26, 2026 · Assigned by sap

Description

SAP Landscape Transformation (SLT) allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating the risk of full system compromise, undermining the confidentiality, integrity and availability of the system.

Affected products

VendorProductAffectedFixed
SAP_SE SAP Landscape Transformation (Analysis Platform) DMIS 2011_1_700, 2011_1_710, 2011_1_730, 2011_1_731, 2011_1_752, 2020 —

Advisories 2

References