Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2676▼ 372 respecto a la semana anterior
Críticas / altas1295▼ 39 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)244▼ 274 respecto a la semana anterior
6 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Pendiente de análisis | Baja (2) | 0.24% | — | SAP Landscape TransformationAI | 14/4/2026 | 17/6/2026 | SAP Landscape Transformation contains a vulnerability in an RFC-exposed function module that could allow a high privileged adversary to inject arbitrary ABAP code and operating system commands. Due to this, some information could be modified, but the attacker does not have control over kind or degree. This leads to a… | |
| Aplazada | Crítica (9.1) | 0.51% | — | SAP Landscape TransformationAI | 13/1/2026 | 17/6/2026 | SAP Landscape Transformation allows an attacker with admin privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code/OS commands into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor,… | |
| Aplazada | Crítica (9.9) | 0.70% | — | SAP Landscape TransformationAI | 12/8/2025 | 17/6/2026 | SAP Landscape Transformation (SLT) allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor,… | |
| Aplazada | Alta (7.7) | 0.35% | — | SAP Landscape TransformationAI | 13/5/2025 | 17/6/2026 | Under certain conditions, SAP Landscape Transformation's PCL Basis module does not perform the necessary authorization checks, allowing authenticated users to access restricted functionalities or data. This can lead to a high impact on confidentiality with no impact on the integrity or availability of the application. | |
| Aplazada | Crítica (9.9) | 0.74% | — | SAP Landscape TransformationAI | 8/4/2025 | 17/6/2026 | SAP Landscape Transformation (SLT) allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor,… | |
| Modificada | Alta (8.8) | 1.3% | — | SAP Landscape TransformationSAP Landscape Transformation Replication ServerSAP S/4hanaSAP Test Data Migration Server | 14/9/2021 | 17/6/2026 | Due to improper input sanitization, an authenticated user with certain specific privileges can remotely call NZDT function modules listed in Solution Section to execute manipulated query or inject ABAP code to gain access to Backend Database. On successful exploitation the threat actor could completely compromise… |