CVE-2025-31330

SAP Landscape Transformation (SLT) allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating the risk of full system compromise, undermining the confidentiality, integrity and availability of the system.

• CWE-94

• https://me.sap.com/notes/3587115
• https://url.sap/sapsecuritypatchday

Published

Apr 8, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-31324SAP NetWeaver Visual Composer Metadata Uploader is not prote…9.8
• CVE-2025-31325Due to a Cross-Site Scripting vulnerability in SAP NetWeaver…5.8
• CVE-2025-31326SAP�BusinessObjects Business�Intelligence Platform (Web Inte…4.1
• CVE-2025-31327SAP Field Logistics Manage Logistics application OData meta-…4.3
• CVE-2025-31328SAP Learning Solution is vulnerable to Cross-Site Request Fo…4.6
• CVE-2025-31329SAP NetWeaver is vulnerable to an Information Disclosure vul…6.2
• CVE-2025-31331SAP NetWeaver allows an attacker to bypass authorization che…4.3
• CVE-2025-31332Due to insecure file permissions in SAP BusinessObjects Busi…7.1
• CVE-2025-31333SAP S4CORE OData meta-data property is vulnerable to data ta…4.3
• CVE-2025-31334Issue that bypasses the "Mark of the Web" security warning f…6.8
• CVE-2025-31335The OpenSAML C++ library before 3.3.1 allows forging of sign…4
• CVE-2025-31338A missing authorization vulnerability in the retrieve teache…6.9