VULNERABILITY INTELLIGENCE

CVE-2022-35171

CVSS score5.5 MEDIUM
EPSS probability0.52%
CISA KEVNot currently listed
Published2022-07-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Description

When a user opens manipulated JPEG 2000 (.jp2, jp2k.x3d) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE relevant information can be found below

Weakness classification

  • cna@sap.com: CWE-20

Primary references