CVE-2022-35171

When a user opens manipulated JPEG 2000 (.jp2, jp2k.x3d) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE relevant information can be found below

• CWE-20

• https://launchpad.support.sap.com/#/notes/3220746Permissions Required, Vendor Advisory
• https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.htmlVendor Advisory
• https://launchpad.support.sap.com/#/notes/3220746Permissions Required, Vendor Advisory
• https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.htmlVendor Advisory

Published

Jul 12, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-35166libjpeg commit 842c7ba was discovered to contain an infinite…5.5
• CVE-2022-35167Printix Cloud Print Management v1.3.1149.0 for Windows was d…8.8
• CVE-2022-35168Due to improper input sanitization of XML input in SAP Busin…7.5
• CVE-2022-35169SAP BusinessObjects Business Intelligence Platform (LCM) - v…6
• CVE-2022-3517A vulnerability was found in the minimatch package. This fla…7.5
• CVE-2022-35170SAP NetWeaver Enterprise Portal does - versions 7.10, 7.11, …6.1
• CVE-2022-35172SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20,…6.1
• CVE-2022-35173An issue was discovered in Nginx NJS v0.7.5. The JUMP offset…7.5
• CVE-2022-35174A stored cross-site scripting (XSS) vulnerability in Kirby's…5.4
• CVE-2022-35175Barangay Management System v1.0 was discovered to contain a …9.8
• CVE-2022-3518A vulnerability classified as problematic has been found in …4.8
• CVE-2022-3519A vulnerability classified as problematic was found in Sourc…6.1