CVE-2021-21455

HIGH

SAP 3D Visual Enterprise Viewer 9 - Denial of Service via Manipulated DIB File

Title source: llm
STIX 2.1

Description

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.

References (2)

Core 2
Core References
Permissions Required x_refsource_misc
https://launchpad.support.sap.com/#/notes/3002617

Scores

CVSS v3 8.8
EPSS 0.0048
EPSS Percentile 65.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-787
Status published
Products (1)
sap/3d_visual_enterprise_viewer 9
Published Jan 12, 2021
Tracked Since Feb 18, 2026