CVE-2021-21458

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

No affected versions have been published.

Timeline

Published: Jan 12, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-214598.8SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources which results in cr CVE-2021-21464.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are affected are 5.7.33 and CVE-2021-214608.8SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted sources which results in cr CVE-2021-214618.8SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in cr CVE-2021-214628.8SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in cr CVE-2021-214638.8SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in cr CVE-2021-214644.3SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in cr CVE-2021-214659.9The BW Database Interface allows an attacker with low privileges to execute any crafted database queries, exposing the backend database. An CVE-2021-214668.8SAP Business Warehouse, versions 700, 701, 702, 711, 730, 731, 740, 750, 782 and SAP BW/4HANA, versions 100, 200, allow a low privileged att CVE-2021-214674.3SAP Banking Services (Generic Market Data) does not perform necessary authorization checks for an authenticated user, resulting in escalatio CVE-2021-214686.5The BW Database Interface does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges t CVE-2021-214697.5When security guidelines for SAP NetWeaver Master Data Management running on windows have not been thoroughly reviewed, it might be possible