VULNERABILITY INTELLIGENCE

CVE-2022-22539

CVSS score6.5 MEDIUM

EPSS probability1.04%

CISA KEVNot currently listed

Published2022-02-09

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Description

When a user opens a manipulated JPEG file format (.jpg, 2d.x3d) received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE relevant information can be found below.

Weakness classification

cna@sap.com: CWE-20

Primary references

cna@sap.com — Permissions Required, Vendor Advisory
cna@sap.com — Not Applicable, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Permissions Required, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Not Applicable, Vendor Advisory