This vulnerability in SAP Landscape Transformation arises from improper control over code generation (CWE-94) in an RFC-exposed function module. A high privileged adversary can inject arbitrary ABAP code and OS commands, potentially modifying some information. However, the attacker lacks precise control over the modifications, limiting the impact to low integrity loss without affecting confidentiality or availability. The issue affects various versions including DMIS 2011_1_xxx and S4CORE 102 through 109. The CVSS 3.1 base score is 2.0, reflecting low severity. No patch or official remediation level has been published as of the data provided.

The vulnerability allows modification of some information by a high privileged attacker through code injection, but the attacker cannot control the extent or type of modification. Confidentiality and availability remain unaffected. The overall impact is low on integrity and does not compromise other security properties.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official remediation level or patch links are provided, organizations should monitor SAP advisories for updates. Given the requirement for high privileges and user interaction, risk is limited but should be managed accordingly.