CVE-2021-21450

February 19, 2021

SAP 3D Visual Enterprise Viewer, version – 9, allows a user to open manipulated PSD file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.

Summary:

SAP 3D Visual Enterprise Viewer, version – 9, allows a user to open manipulated PSD file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.

Reference Links(if available):

  • https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476
  • https://launchpad.support.sap.com/#/notes/3002617

  • CVSS Score (if available)

    v2: / MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

    v3: / HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

    Links to Exploits(if available)

  • You may have missed

    CISA Logo

    CISA: Fortinet Updates Guidance and Indicators of Compromise following FortiManager Vulnerability Exploitation

    November 22, 2024
    CISA Logo

    CISA: JCDC’s Industry-Government Collaboration Speeds Mitigation of CrowdStrike IT Outage

    November 22, 2024
    CISA Logo

    CISA: CISA Releases Three Industrial Control Systems Advisories

    November 22, 2024
    CISA Logo

    CISA: CISA Releases Four Industrial Control Systems Advisories

    November 22, 2024
    CISA Logo

    CISA: Foreign Threat Actor Conducting Large-Scale Spear-Phishing Campaign with RDP Attachments

    November 22, 2024