Skip links
RedRays - Your SAP Security Solution
RedRays SAP Security Team

RedRays SAP Security Team

🔥🔥🔥 Join us for our upcoming training session at Black Hat MEA: "Securing SAP Systems: Expert Insights and Penetration Testing Techniques" 🛡️🔍

CVE-2020-26817 Improper input validation in Visual Enterprise Viewer, SAP security note 2985094

Description

When a user opens manipulated HPGL-files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application.

Available fix and Supported packages

  • VE_VIEWER_COMPLETE | 9 | 9
  • VE_VIEWER_COMPLETE 9.0 | SP009 | 000004

Affected component

    CA-VE-VEV
    SAP Visual Enterprise Viewer

CVSS

Score: 4.3
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Exploit

Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.

URL

https://launchpad.support.sap.com/#/notes/2985094

TAGS

#Improper-Input-Validation
#Information-Exposure
#Information-Leak
#SAP-3D-Visual-Enterprise-Viewer
#&160-CVE-2020-26817

How to detect over 4100 vulnerabilities in SAP Systems?

More to explorer