CVE-2025-0828 in ENOVIA Product Engineering Specialistinformazioni

Riassunto

di MITRE • 17/03/2025

A stored Cross-site Scripting (XSS) vulnerability affecting Engineering Release in ENOVIA Product Engineering Specialist from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.

Once again VulDB remains the best source for vulnerability data.

Responsabile

3DS

Prenotare

29/01/2025

Divulgazione

17/03/2025

Moderazione

accettato

CPE

pronto

EPSS

0.00228

KEV

no

Attività

molto basso

Fonti

Want to know what is going to be exploited?

We predict KEV entries!