CVE-2020-6337

medium

Description

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated HDR file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.

References

https://www.zerodayinitiative.com/advisories/ZDI-20-1155/

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=557449700

https://launchpad.support.sap.com/#/notes/2960815

Details

Source: Mitre, NVD

Published: 2020-09-09

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:P

Severity: Medium

CVSS v3

Base Score: 4.3

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Severity: Medium

EPSS

EPSS: 0.00373