8.7Hoch
CVE-2026-2101Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIAvpm Web Access from ENOVIAvpm Version 1 Release 16 through ENOVIAvpm Version 1 Release 19
Beschreibung
A Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIAvpm Web Access from ENOVIAvpm Version 1 Release 16 through ENOVIAvpm Version 1 Release 19 allows an attacker to execute arbitrary script code in user's browser session.
Schwachstellentyp (CWE):
CWE-79
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| Dassault Systèmes | ENOVIAvpm Web Access | ENOVIAvpm V1R16 Golden – ≤ ENOVIAvpm V1R16 SP6, ENOVIAvpm V1R17 Golden – ≤ ENOVIAvpm V1R17 SP5, ENOVIAvpm V1R18 Golden – ≤ ENOVIAvpm V1R18 SP3, ENOVIAvpm V1R19 Golden – ≤ ENOVIAvpm V1R19 SP1 |