9.9Crítica

CVE-2026-84154Code Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x

Dassault Systèmes GEOVIA Geospatial Data Manager Publicada: (hace 1 mes)

Descripción

A Code Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x could allow an attacker to execute arbitrary code on the server.

Debilidad (CWE): CWE-94

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
Dassault Systèmes GEOVIA Geospatial Data Manager Release 3DEXPERIENCE R2024x Golden – ≤ Release 3DEXPERIENCE R2024x.FP.CFA.2632, Release 3DEXPERIENCE R2025x Golden – ≤ Release 3DEXPERIENCE R2025x.FP.CFA.2637, Release 3DEXPERIENCE R2026x Golden – ≤ Release 3DEXPERIENCE R2026x.FP.CFA.2635

Referencias y parches