CVE-2022-32240

When a user opens manipulated Jupiter Tesselation (.jt, JTReader.x3d) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application.
Configurations

Configuration 1 (hide)

cpe:2.3:a:sap:3d_visual_enterprise_viewer:*:*:*:*:*:*:*:*

History

23 Jun 2022, 19:26

Type Values Removed Values Added
First Time Sap
Sap 3d Visual Enterprise Viewer
CVSS v2 : unknown
v3 : unknown
v2 : 4.3
v3 : 5.5
CPE cpe:2.3:a:sap:3d_visual_enterprise_viewer:*:*:*:*:*:*:*:*
References (MISC) https://launchpad.support.sap.com/#/notes/3206271 - (MISC) https://launchpad.support.sap.com/#/notes/3206271 - Permissions Required, Vendor Advisory
References (MISC) https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - (MISC) https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - Vendor Advisory

14 Jun 2022, 23:15

Type Values Removed Values Added
New CVE

Information

Published : 2022-06-14 23:15

Updated : 2023-12-10 14:22


NVD link : CVE-2022-32240

Mitre link : CVE-2022-32240

CVE.ORG link : CVE-2022-32240


JSON object : View

Products Affected

sap

  • 3d_visual_enterprise_viewer
CWE
CWE-20

Improper Input Validation