8.7High
CVE-2025-10552Stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2025x
Description
A stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.
Weakness (CWE):
CWE-79
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| 3ds | 3dswymer | r2025x | |
| Dassault Systèmes | 3DSwymer | Release 3DEXPERIENCE R2025x Golden – ≤ Release 3DEXPERIENCE R2025x FP.CFA.2514 |
References and patches
CPE matches (NVD) (1)
cpe:2.3:a:3ds:3dswymer:r2025x:*:*:*:*:*:*:*