deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-20439
Published: 2022-10-11
Description: In Messaging, There has unauthorized provider, this could cause Local Deny of Service.Product: AndroidVersions: Android SoCAndroid ID: A-242266172
CVSS Score: 5.5 (MEDIUM)
References: https://source.android.com/security/bulletin/2022-10-01; https://source.android.com/security/bulletin/2022-10-01
CVE: CVE-2022-20440
Published: 2022-10-11
Description: In Messaging, There has unauthorized broadcast, this could cause Local Deny of Service.Product: AndroidVersions: Android SoCAndroid ID: A-242259918
CVSS Score: 5.5 (MEDIUM)
References: https://source.android.com/security/bulletin/2022-10-01; https://source.android.com/security/bulletin/2022-10-01
CVE: CVE-2022-38086
Published: 2022-10-11
Description: Cross-Site Request Forgery (CSRF) vulnerability in Shortcodes Ultimate plugin <= 5.12.0 at WordPress leading to plugin preset settings change.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/shortcodes-ultimate/wordpress-shortcodes-ultimate-plugin-5-12-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve; https://wordpress.org/plugins/shortcodes-ultimate/#developers; https://patchstack.com/database/vulnerability/shortcodes-ultimate/wordpress-shortcodes-ultimate-plugin-5-12-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2021-36201
Published: 2022-10-11
Description: Under certain circumstances a CCURE Portal user could enumerate user accounts in CCURE 9000 version 2.90 and prior versions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-204, CWE-203
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-284-03; https://www.johnsoncontrols.com/cyber-solutions/security-advisories; https://www.cisa.gov/uscert/ics/advisories/icsa-22-284-03
CVE: CVE-2022-31682
Published: 2022-10-11
Description: VMware Aria Operations contains an arbitrary file read vulnerability. A malicious actor with administrative privileges may be able to read arbitrary files containing sensitive data.
CVSS Score: 4.9 (MEDIUM)
References: https://www.vmware.com/security/advisories/VMSA-2022-0026.html; https://www.vmware.com/security/advisories/VMSA-2022-0026.html
CVE: CVE-2022-35226
Published: 2022-10-11
Description: SAP Data Services Management allows an attacker to copy the data from a request and echoed into the application's immediate response, it will lead to a Cross-Site Scripting vulnerability. The attacker would have to log in to the management console to perform such as an attack, only few of the pages are vulnerable in the DS management console.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/3167342; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3167342
CVE: CVE-2022-35296
Published: 2022-10-11
Description: Under certain conditions, the application SAP BusinessObjects Business Intelligence Platform (Version Management System) exposes sensitive information to an actor over the network with high privileges that is not explicitly authorized to have access to that information, leading to a high impact on Confidentiality.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://launchpad.support.sap.com/#/notes/3233226; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3233226
CVE: CVE-2022-35297
Published: 2022-10-11
Description: The application SAP Enable Now does not sufficiently encode user-controlled inputs over the network before it is placed in the output being served to other users, thereby expanding the attack scope, resulting in Stored Cross-Site Scripting (XSS) vulnerability leading to limited impact on Confidentiality, Integrity and Availability.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://launchpad.support.sap.com/#/notes/3049899; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3049899
CVE: CVE-2022-35299
Published: 2022-10-11
Description: SAP SQL Anywhere - version 17.0, and SAP IQ - version 16.1, allows an attacker to leverage logical errors in memory management to cause a memory corruption, such as Stack-based buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121
References: https://launchpad.support.sap.com/#/notes/3232021; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3232021
CVE: CVE-2022-38138
Published: 2022-10-11
Description: The Triangle Microworks IEC 61850 Library (Any client or server using the C language library with a version number of 11.2.0 or earlier and any client or server using the C++, C#, or Java language library with a version number of 5.0.1 or earlier) and 60870-6 (ICCP/TASE.2) Library (Any client or server using a C++ language library with a version number of 4.4.3 or earlier) are vulnerable to access given to a small number of uninitialized pointers within their code. This could allow an attacker to target any client or server using the affected libraries to cause a denial-of-service condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-824, CWE-824
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-249-01; https://www.cisa.gov/uscert/ics/advisories/icsa-22-249-01
CVE: CVE-2022-39013
Published: 2022-10-11
Description: Under certain conditions an authenticated attacker can get access to OS credentials. Getting access to OS credentials enables the attacker to modify system data and make the system unavailable leading to high impact on confidentiality and low impact on integrity and availability of the application.
CVSS Score: 7.6 (HIGH)
CWE: CWE-200
References: https://launchpad.support.sap.com/#/notes/3229132; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3229132
CVE: CVE-2022-39015
Published: 2022-10-11
Description: Under certain conditions, BOE AdminTools/ BOE SDK allows an attacker to access information which would otherwise be restricted.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-668
References: https://launchpad.support.sap.com/#/notes/3239293; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3239293
CVE: CVE-2022-39800
Published: 2022-10-11
Description: SAP BusinessObjects BI LaunchPad - versions 420, 430, is susceptible to script execution attack by an unauthenticated attacker due to improper sanitization of the user inputs while interacting on the network. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://launchpad.support.sap.com/#/notes/3211161; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3211161
CVE: CVE-2022-39802
Published: 2022-10-11
Description: SAP Manufacturing Execution - versions 15.1, 15.2, 15.3, allows an attacker to exploit insufficient validation of a file path request parameter. The intended file path can be manipulated to allow arbitrary traversal of directories on the remote server. The file content within each directory can be read which may lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/168716/SAP-Manufacturing-Execution-Core-15.3-Path-Traversal.html; https://launchpad.support.sap.com/#/notes/3242933; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE: CVE-2022-39803
Published: 2022-10-11
Description: Due to lack of proper memory management, when a victim opens a manipulated ACIS Part and Assembly (.sat, CoreCadTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787, CWE-119, CWE-787
References: https://launchpad.support.sap.com/#/notes/3245929; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3245929
CVE: CVE-2022-39804
Published: 2022-10-11
Description: Due to lack of proper memory management, when a victim opens a manipulated SolidWorks Part (.sldprt, CoreCadTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787, CWE-119, CWE-787
References: https://launchpad.support.sap.com/#/notes/3245929; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3245929
CVE: CVE-2022-39805
Published: 2022-10-11
Description: Due to lack of proper memory management, when a victim opens a manipulated Computer Graphics Metafile (.cgm, CgmTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787, CWE-119, CWE-787
References: https://launchpad.support.sap.com/#/notes/3245929; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3245929
CVE: CVE-2022-39806
Published: 2022-10-11
Description: Due to lack of proper memory management, when a victim opens a manipulated SolidWorks Drawing (.slddrw, CoreCadTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787, CWE-119, CWE-787
References: https://launchpad.support.sap.com/#/notes/3245929; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3245929
CVE: CVE-2022-39807
Published: 2022-10-11
Description: Due to lack of proper memory management, when a victim opens manipulated SolidWorks Drawing (.sldasm, CoreCadTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://launchpad.support.sap.com/#/notes/3245929; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3245929
CVE: CVE-2022-39808
Published: 2022-10-11
Description: Due to lack of proper memory management, when a victim opens a manipulated Wavefront Object (.obj, ObjTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787, CWE-119, CWE-787
References: https://launchpad.support.sap.com/#/notes/3245929; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3245929
CVE: CVE-2022-3140
Published: 2022-10-11
Description: LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An additional scheme 'vnd.libreoffice.command' specific to LibreOffice was added. In the affected versions of LibreOffice links using that scheme could be constructed to call internal macros with arbitrary arguments. Which when clicked on, or activated by document events, could result in arbitrary script execution without warning. This issue affects: The Document Foundation LibreOffice 7.4 versions prior to 7.4.1; 7.3 versions prior to 7.3.6.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-20, CWE-88
References: https://lists.debian.org/debian-lts-announce/2023/03/msg00022.html; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TORANVTIWWBH3DNJR4UZATAG67KZOH32/; https://security.gentoo.org/glsa/202212-04
CVE: CVE-2022-41166
Published: 2022-10-11
Description: Due to lack of proper memory management, when a victim opens manipulated Wavefront Object (.obj, ObjTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://launchpad.support.sap.com/#/notes/3245929; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3245929
CVE: CVE-2022-41167
Published: 2022-10-11
Description: Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dwg, TeighaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787, CWE-119, CWE-787
References: https://launchpad.support.sap.com/#/notes/3245929; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3245929
CVE: CVE-2022-41168
Published: 2022-10-11
Description: Due to lack of proper memory management, when a victim opens a manipulated CATIA5 Part (.catpart, CatiaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787, CWE-119, CWE-787
References: https://launchpad.support.sap.com/#/notes/3245929; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3245929
CVE: CVE-2022-41169
Published: 2022-10-11
Description: Due to lack of proper memory management, when a victim opens manipulated CATIA5 Part (.catpart, CatiaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://launchpad.support.sap.com/#/notes/3245929; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3245929
CVE: CVE-2022-41170
Published: 2022-10-11
Description: Due to lack of proper memory management, when a victim opens a manipulated CATIA4 Part (.model, CatiaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787, CWE-119, CWE-787
References: https://launchpad.support.sap.com/#/notes/3245929; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3245929
CVE: CVE-2022-41171
Published: 2022-10-11
Description: Due to lack of proper memory management, when a victim opens manipulated CATIA4 Part (.model, CatiaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119, CWE-119
References: https://launchpad.support.sap.com/#/notes/3245929; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3245929
CVE: CVE-2022-41172
Published: 2022-10-11
Description: Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dxf, TeighaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787, CWE-119, CWE-787
References: https://launchpad.support.sap.com/#/notes/3245929; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3245929
CVE: CVE-2022-41173
Published: 2022-10-11
Description: Due to lack of proper memory management, when a victim opens manipulated AutoCAD (.dxf, TeighaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://launchpad.support.sap.com/#/notes/3245929; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3245929
CVE: CVE-2022-41174
Published: 2022-10-11
Description: Due to lack of proper memory management, when a victim opens manipulated Right Hemisphere Material (.rhm, rh.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://launchpad.support.sap.com/#/notes/3245929; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3245929
CVE: CVE-2022-41175
Published: 2022-10-11
Description: Due to lack of proper memory management, when a victim opens a manipulated Enhanced Metafile (.emf, emf.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787, CWE-119, CWE-787
References: https://launchpad.support.sap.com/#/notes/3245929; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3245929
CVE: CVE-2022-41176
Published: 2022-10-11
Description: Due to lack of proper memory management, when a victim opens manipulated Enhanced Metafile (.emf, emf.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://launchpad.support.sap.com/#/notes/3245929; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3245929
CVE: CVE-2022-41177
Published: 2022-10-11
Description: Due to lack of proper memory management, when a victim opens a manipulated Iges Part and Assembly (.igs, .iges, CoreCadTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787, CWE-119, CWE-787
References: https://launchpad.support.sap.com/#/notes/3245929; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3245929
CVE: CVE-2022-41178
Published: 2022-10-11
Description: Due to lack of proper memory management, when a victim opens manipulated Iges Part and Assembly (.igs, .iges, CoreCadTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://launchpad.support.sap.com/#/notes/3245929; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3245929
CVE: CVE-2022-41179
Published: 2022-10-11
Description: Due to lack of proper memory management, when a victim opens a manipulated Jupiter Tesselation (.jt, JtTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787, CWE-119, CWE-787
References: https://launchpad.support.sap.com/#/notes/3245929; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3245929
CVE: CVE-2022-41180
Published: 2022-10-11
Description: Due to lack of proper memory management, when a victim opens a manipulated Portable Document Format (.pdf, PDFPublishing.dll) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible that a Remote Code Execution can be triggered when payload forces a stack-based overflow or a re-use of dangling pointer which refers to overwritten space in memory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787, CWE-119, CWE-787
References: https://launchpad.support.sap.com/#/notes/3245929; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3245929
CVE: CVE-2022-41181
Published: 2022-10-11
Description: Due to lack of proper memory management, when a victim opens manipulated Portable Document Format (.pdf, PDFPublishing.dll) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://launchpad.support.sap.com/#/notes/3245929; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3245929
CVE: CVE-2022-41182
Published: 2022-10-11
Description: Due to lack of proper memory management, when a victim opens manipulated Parasolid Part and Assembly (.x_b, CoreCadTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://launchpad.support.sap.com/#/notes/3245929; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3245929
CVE: CVE-2022-41183
Published: 2022-10-11
Description: Due to lack of proper memory management, when a victim opens manipulated Windows Cursor File (.cur, ico.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until restart of the application.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://launchpad.support.sap.com/#/notes/3245929; https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html; https://launchpad.support.sap.com/#/notes/3245929