IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
8.7Alta

CVE-2025-10556Stored Cross-site Scripting (XSS) vulnerability affecting Specification Management in ENOVIA Specification Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x

Dassault Systèmes ENOVIA Specification Manager Publicada: (hace 1 año)

Descripción

A stored Cross-site Scripting (XSS) vulnerability affecting Specification Management in ENOVIA Specification Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.

Debilidad (CWE): CWE-79

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
3ds 3dexperience enovia r2023x – ≤ r2025x
Dassault Systèmes ENOVIA Specification Manager Release 3DEXPERIENCE R2023x Golden – ≤ Release 3DEXPERIENCE R2023x.FP.CFA.2514, Release 3DEXPERIENCE R2024x Golden – ≤ Release 3DEXPERIENCE R2024x.FP.CFA.2510, Release 3DEXPERIENCE R2025x Golden – ≤ Release 3DEXPERIENCE R2024x.FP.CFA.2514

Referencias y parches

Coincidencias CPE (NVD) (1)
  • cpe:2.3:a:3ds:3dexperience_enovia:*:*:*:*:*:*:*:* ≥ r2023x ≤ r2025x