Skip links

CVE-2020-26817 Improper input validation in Visual Enterprise Viewer, SAP security note 2985094

Description

When a user opens manipulated HPGL-files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application.

Available fix and Supported packages

  • VE_VIEWER_COMPLETE | 9 | 9
  • VE_VIEWER_COMPLETE 9.0 | SP009 | 000004

Affected component

    CA-VE-VEV
    SAP Visual Enterprise Viewer

CVSS

Score: 4.3
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Exploit

Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.

URL

https://launchpad.support.sap.com/#/notes/2985094

TAGS

#Improper-Input-Validation
#Information-Exposure
#Information-Leak
#SAP-3D-Visual-Enterprise-Viewer
#&160-CVE-2020-26817

How to detect over 4100 vulnerabilities in SAP Systems?

More to explorer

Initiating SAP Penetration Testing

►   Pentest, short for penetration testing, refers to a set of processes that simulate an attacker’s actions to identify security vulnerabilities. Companies