CVE-2020-26817
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2020-26817
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
SAP 3D Visual Enterprise Viewer, version - 9, allows an user to open manipulated HPGL file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
SAP 3D Visual Enterprise Viewer 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SAP 3D Visual Enterprise Viewer是德国思爱普（SAP）公司的一款 3D 视图查看器。该软件支持在所有行业标准的桌面应用中发布2D、3D场景，并支持以独立可执行程序和 ActiveX 空间单独安装。 SAP 3D Visual Enterprise Viewer 9版本存在安全漏洞，该漏洞允许用户打开操作HPGL文件收到不可信的来源，这导致崩溃的应用程序和暂时不可用，直到用户重新启动应用程序，这是由于不适当的输入验证。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| SAP SE | SAP 3D Visual Enterprise Viewer | < 9 | - |
II. Public POCs for CVE-2020-26817
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-26817
请登录查看更多情报信息。
- https://launchpad.support.sap.com/#/notes/2985094x_refsource_MISC
- https://www.zerodayinitiative.com/advisories/ZDI-20-1364/x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2020-26817
Same Patch Batch · SAP SE · 2020-11-10 · 16 CVEs total
| CVE-2020-26809 | SAP Commerce Cloud 授权问题漏洞 | |
| CVE-2020-6316 | SAP ERP和SAP S/4 HANA 授权问题漏洞 | |
| CVE-2020-26811 | SAP Commerce Cloud 代码问题漏洞 | |
| CVE-2020-26808 | SAP S4 HANA和SAP AS ABAP 代码注入漏洞 | |
| CVE-2020-26815 | SAP Fiori 代码问题漏洞 | |
| CVE-2020-26819 | SAP Netweaver 授权问题漏洞 | |
| CVE-2020-26820 | SAP NetWeaver AS JAVA 代码问题漏洞 | |
| CVE-2020-26814 | SAP Process Integration 安全漏洞 | |
| CVE-2020-26822 | sap solution manager (java stack) 安全漏洞 | |
| CVE-2020-26824 | sap solution manager (java stack) 安全漏洞 | |
| CVE-2020-26818 | SAP NetWeaver AS 信息泄露漏洞 | |
| CVE-2020-26821 | sap solution manager (java stack) 安全漏洞 | |
| CVE-2020-26823 | sap solution manager (java stack) 安全漏洞 | |
| CVE-2020-26810 | SAP Commerce Cloud 安全漏洞 | |
| CVE-2020-26807 | SAP ERP 安全漏洞 |
IV. Related Vulnerabilities
Same product: SAP 3D Visual Enterprise Viewer
Same vendor: SAP SE
- CVE-2025-42956
Multiple vulnerabilities in SAP NetWeaver Application Server - CVE-2023-36920
Clickjacking vulnerability in SAP Enable Now - CVE-2023-40307
Privileges Memory Corruption (Out-of-bound write) - CVE-2023-40306
URL Redirection vulnerability in SAP S/4HANA (Manage Catalog - CVE-2022-41211
SAP 3D Visual Enterprise Viewer和SAP 3D Visual Enterprise Aut
V. Comments for CVE-2020-26817
No comments yet