CVE-2025-10551 in Dassault Systèmes ENOVIA Collaborative Industry Innovator
Sumário (Inglês)
A Stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.
Responsável
3DS
Reservar
16/09/2025
Divulgação
31/03/2026
Inscrições
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidade | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 354335 | Dassault Systèmes ENOVIA Collaborative Industry Innovator Document Management Script de Site Cruzado | 79 | Não definido | Não definido | CVE-2025-10551 |