VULNERABILITY INTELLIGENCE

CVE-2022-22537

CVSS score6.5 MEDIUM
EPSS probability0.89%
CISA KEVNot currently listed
Published2022-02-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Description

When a user opens a manipulated Tagged Image File Format (.tiff, 2d.x3d)) received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE relevant information can be found below.

Weakness classification

  • cna@sap.com: CWE-20
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references