CVE-2020-6315 - SAP 3D Visual Enterprise Viewer, version 9, allows an attacker to send certain manipulated file to the victim, which can lead to leakage of sensitive information when the victim loads the malicious file into the VE viewer, leading to Information Disclosure

Back Back to CVE browser

MEDIUM

SAP 3D Visual Enterprise Viewer, version 9, allows an attacker to send certain manipulated file to the victim, which can lead to leakage of sensitive information when the victim loads the malicious file into the VE viewer, leading to Information Disclosure

Published Oct 20, 2020

5.5

MEDIUM

CVSS 3.1

EPSS 0.81%

Description

SAP 3D Visual Enterprise Viewer, version 9, allows an attacker to send certain manipulated file to the victim, which can lead to leakage of sensitive information when the victim loads the malicious file into the VE viewer, leading to Information Disclosure.

Affected products

Vendor SAP SE Product SAP 3D Visual Enterprise Viewer Default
unknown
Affected
- < 9

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
SAP SE	SAP 3D Visual Enterprise Viewer	unknown	Affected < 9

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-27465
Advisory
https://launchpad.support.sap.com/#/notes/2973497
x_refsource_MISCPermissions RequiredVendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=558632196
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-27465		Advisory
https://launchpad.support.sap.com/#/notes/2973497		x_refsource_MISCPermissions RequiredVendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=558632196		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner sap

Published Oct 20, 2020

Updated Aug 4, 2024

Reserved Jan 8, 2020

Link CVE-2020-6315

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-6315

Red Hat

No data

ENISA EUVD

Assigner sap

Published Oct 20, 2020

Updated Aug 4, 2024

Link EUVD-2020-27465

GitHub

No data