CVE-2021-21463

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Jan 12, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-214644.3SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crCVE-2021-214659.9The BW Database Interface allows an attacker with low privileges to execute any crafted database queries, exposing the backend database. An CVE-2021-214668.8SAP Business Warehouse, versions 700, 701, 702, 711, 730, 731, 740, 750, 782 and SAP BW/4HANA, versions 100, 200, allow a low privileged attCVE-2021-214674.3SAP Banking Services (Generic Market Data) does not perform necessary authorization checks for an authenticated user, resulting in escalatioCVE-2021-214686.5The BW Database Interface does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges tCVE-2021-214697.5When security guidelines for SAP NetWeaver Master Data Management running on windows have not been thoroughly reviewed, it might be possibleCVE-2021-21471.8Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Installation). The supported version that is affCVE-2021-214704.4SAP EPM Add-in for Microsoft Office, version - 1010 and SAP EPM Add-in for SAP Analysis Office, version - 2.8, allows an authenticated attacCVE-2021-214716.5In CLA-Assistant, versions before 2.8.5, due to improper access control an authenticated user could access API endpoints which are not intenCVE-2021-214728.8SAP Software Provisioning Manager 1.0 (SAP NetWeaver Master Data Management Server 7.1) does not have an option to set password during its iCVE-2021-214736.3SAP NetWeaver AS ABAP and ABAP Platform, versions - 700, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, contains function modulCVE-2021-214746.5SAP HANA Database, versions - 1.0, 2.0, accepts SAML tokens with MD5 digest, an attacker who manages to obtain an MD5-digest signed SAML Ass
CVE-2021-21463: High severity, CVSS 8.8 | Vulnix