8.7Alta
CVE-2026-2101Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIAvpm Web Access from ENOVIAvpm Version 1 Release 16 through ENOVIAvpm Version 1 Release 19
Descripción
A Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIAvpm Web Access from ENOVIAvpm Version 1 Release 16 through ENOVIAvpm Version 1 Release 19 allows an attacker to execute arbitrary script code in user's browser session.
Debilidad (CWE):
CWE-79
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| Dassault Systèmes | ENOVIAvpm Web Access | ENOVIAvpm V1R16 Golden – ≤ ENOVIAvpm V1R16 SP6, ENOVIAvpm V1R17 Golden – ≤ ENOVIAvpm V1R17 SP5, ENOVIAvpm V1R18 Golden – ≤ ENOVIAvpm V1R18 SP3, ENOVIAvpm V1R19 Golden – ≤ ENOVIAvpm V1R19 SP1 |