CVE-2021-21460
Assigner: sap
Published: 2021-01-12T14:38:28
State: PUBLISHED
affected: product: SAP 3D Visual Enterprise Viewer
vendor: SAP SE
versions: status: affected
version: < 9
descriptions: value: SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.
metrics: cvssV3_0: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
version: 3.0
problemTypes: descriptions: description: Improper Input Validation
type: text