8.7Hoch
CVE-2025-0599Stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x
Beschreibung
A stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
Schwachstellentyp (CWE):
CWE-79
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| 3ds | 3dexperience enovia | r2024x | |
| Dassault Systèmes | ENOVIA Collaborative Industry Innovator | Release 3DEXPERIENCE R2024x Golden – ≤ Release 3DEXPERIENCE R2024x.FP.CFA.2432 |
Referenzen und Patches
- https://www.3ds.com/vulnerability/advisories Vendor Advisory
CPE-Treffer (NVD) (1)
cpe:2.3:a:3ds:3dexperience_enovia:r2024x:*:*:*:*:*:*:*