IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
8.7Alta

CVE-2025-12956Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x

Dassault Systèmes ENOVIA Collaborative Industry Innovator Publicada: (hace 11 meses)

Descripción

A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.

Debilidad (CWE): CWE-79

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
3ds 3dexperience enovia r2022x – ≤ r2025x
Dassault Systèmes ENOVIA Collaborative Industry Innovator Release 3DEXPERIENCE R2022x Golden – ≤ Release 3DEXPERIENCE R2022x.FP.CFA.2521, Release 3DEXPERIENCE R2023x Golden – ≤ Release 3DEXPERIENCE R2023x.FP.CFA.2523, Release 3DEXPERIENCE R2024x Golden – ≤ Release 3DEXPERIENCE R2024x.FP.CFA.2519, Release 3DEXPERIENCE R2025x Golden – ≤ Release 3DEXPERIENCE R2024x.FP.CFA.2524

Referencias y parches

Coincidencias CPE (NVD) (1)
  • cpe:2.3:a:3ds:3dexperience_enovia:*:*:*:*:*:*:*:* ≥ r2022x ≤ r2025x