SAP 3d Visual Enterprise Author vulnerabilities

27 CVEs affecting SAP 3d Visual Enterprise Author, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-41211, published 2022-11-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-41175, published 2022-10-11. High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days. Due to lack of proper memory management, when a victim opens a manipulated Enhanced Metafile (.emf, emf.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is…
CVE-2022-41184, published 2022-10-11. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Due to lack of proper memory management, when a victim opens a manipulated Windows Cursor File (.cur, ico.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it…
CVE-2022-39806, published 2022-10-11. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Due to lack of proper memory management, when a victim opens a manipulated SolidWorks Drawing (.slddrw, CoreCadTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author…
CVE-2022-39804, published 2022-10-11. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Due to lack of proper memory management, when a victim opens a manipulated SolidWorks Part (.sldprt, CoreCadTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author -…
CVE-2022-39803, published 2022-10-11. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Due to lack of proper memory management, when a victim opens a manipulated ACIS Part and Assembly (.sat, CoreCadTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author…
CVE-2022-41179, published 2022-10-11. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Due to lack of proper memory management, when a victim opens a manipulated Jupiter Tesselation (.jt, JtTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author -…
CVE-2022-41177, published 2022-10-11. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Due to lack of proper memory management, when a victim opens a manipulated Iges Part and Assembly (.igs, .iges, CoreCadTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise…
CVE-2022-41172, published 2022-10-11. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Due to lack of proper memory management, when a victim opens a manipulated AutoCAD (.dxf, TeighaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it…
CVE-2022-41170, published 2022-10-11. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Due to lack of proper memory management, when a victim opens a manipulated CATIA4 Part (.model, CatiaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author - version…
CVE-2022-41168, published 2022-10-11. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Due to lack of proper memory management, when a victim opens a manipulated CATIA5 Part (.catpart, CatiaTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise Author -…

Latest

CVE-2022-41211, published 2022-11-08. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Due to lack of proper memory management, when a victim opens manipulated file received from untrusted sources in SAP 3D Visual Enterprise Author and SAP 3D Visual Enterprise Viewer, Arbitrary Code…
CVE-2022-41185, published 2022-10-11. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Due to lack of proper memory management, when a victim opens a manipulated Visual Design Stream (.vds, MataiPersistence.dll) file received from untrusted sources in SAP 3D Visual Enterprise Author -…
CVE-2022-41183, published 2022-10-11. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Due to lack of proper memory management, when a victim opens manipulated Windows Cursor File (.cur, ico.x3d) file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is…
CVE-2022-41182, published 2022-10-11. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Due to lack of proper memory management, when a victim opens manipulated Parasolid Part and Assembly (.x_b, CoreCadTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise…
CVE-2022-41181, published 2022-10-11. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Due to lack of proper memory management, when a victim opens manipulated Portable Document Format (.pdf, PDFPublishing.dll) file received from untrusted sources in SAP 3D Visual Enterprise Author -…
CVE-2022-41180, published 2022-10-11. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Due to lack of proper memory management, when a victim opens a manipulated Portable Document Format (.pdf, PDFPublishing.dll) file received from untrusted sources in SAP 3D Visual Enterprise Author -…
CVE-2022-41178, published 2022-10-11. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Due to lack of proper memory management, when a victim opens manipulated Iges Part and Assembly (.igs, .iges, CoreCadTranslator.exe) file received from untrusted sources in SAP 3D Visual Enterprise…