CVE-2022-22539: SAP 3d Visual Enterprise Viewer

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

When a user opens a manipulated JPEG file format (.jpg, 2d.x3d) received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE relevant information can be found below.

Affected products

• SAP 3d Visual Enterprise Viewer: version 9 only

Published 2022-02-09. Last modified 2026-06-17.