CVE-2020-26817

SAP 3D Visual Enterprise Viewer, version - 9, allows an user to open manipulated HPGL file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.

• CWE-20
• CWE-787

• https://launchpad.support.sap.com/#/notes/2985094Permissions Required
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=562725571Vendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-20-1364/Third Party Advisory, VDB Entry
• https://launchpad.support.sap.com/#/notes/2985094Permissions Required
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=562725571Vendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-20-1364/Third Party Advisory, VDB Entry

Published

Nov 10, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-2681Vulnerability in the Oracle VM VirtualBox product of Oracle …6.5
• CVE-2020-26810SAP Commerce Cloud (Accelerator Payment Mock), versions - 18…7.5
• CVE-2020-26811SAP Commerce Cloud (Accelerator Payment Mock), versions - 18…5.3
• CVE-2020-26814SAP Process Integration (PGP Module - Business-to-Business A…4.9
• CVE-2020-26815SAP Fiori Launchpad (News tile Application), versions - 750,…8.6
• CVE-2020-26816SAP AS JAVA (Key Storage Service), versions - 7.10, 7.11, 7.…4.5
• CVE-2020-26818SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750…8.8
• CVE-2020-26819SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750…8.8
• CVE-2020-2682Vulnerability in the Oracle VM VirtualBox product of Oracle …8.2
• CVE-2020-26820SAP NetWeaver AS JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.…7.2
• CVE-2020-26821SAP Solution Manager (JAVA stack), version - 7.20, allows an…10
• CVE-2020-26822SAP Solution Manager (JAVA stack), version - 7.20, allows an…10