8.7Yüksek
CVE-2026-2101Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIAvpm Web Access from ENOVIAvpm Version 1 Release 16 through ENOVIAvpm Version 1 Release 19
Açıklama
A Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIAvpm Web Access from ENOVIAvpm Version 1 Release 16 through ENOVIAvpm Version 1 Release 19 allows an attacker to execute arbitrary script code in user's browser session.
Zayıflık türü (CWE):
CWE-79
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| Dassault Systèmes | ENOVIAvpm Web Access | ENOVIAvpm V1R16 Golden – ≤ ENOVIAvpm V1R16 SP6, ENOVIAvpm V1R17 Golden – ≤ ENOVIAvpm V1R17 SP5, ENOVIAvpm V1R18 Golden – ≤ ENOVIAvpm V1R18 SP3, ENOVIAvpm V1R19 Golden – ≤ ENOVIAvpm V1R19 SP1 |