CVE-2020-6372

high

Description

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PDF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.

References

https://www.zerodayinitiative.com/advisories/ZDI-20-1264/

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=558632196

https://launchpad.support.sap.com/#/notes/2973497

Details

Source: Mitre, NVD

Published: 2020-10-15

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 7.8

Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.00226