New MCP server — Bring vulnerability intelligence into your AI
Back to feed

CVE-2022-35171

NVDCIRCLENISA

EUVD-2022-38065 · Published Jul 12, 2022

When a user opens manipulated JPEG 2000 (.jp2, jp2k.x3d) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE relevant information can be found below

Technologies

Sap 3D Visual Enterprise Viewer

Weaknesses

CWE-20

CVSS scores

  • v3.15.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
  • v2.04.3AV:N/AC:M/Au:N/C:N/I:N/A:P

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

Initial Access

References

Potentially impacted assets

See if this affects your attack surface

Take 15 minutes to discover our platform with our experts

PatrowlIntel platform screenshot