PT-2025-47929 · Dassault Systèmes · Enovia Product Manager
CVE-2025-10554
·
Publicado
2025-11-24
·
Atualizado
2025-11-24
CVSS v3.1
8.7
Alta
| Vetor | AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
ENOVIA Product Manager versions 3DEXPERIENCE R2023x through 3DEXPERIENCE R2025x
Description
A stored Cross-site Scripting (XSS) issue exists in Requirements within ENOVIA Product Manager. This allows an attacker to execute arbitrary script code within a user's browser session.
Recommendations
Update ENOVIA Product Manager to a version later than 3DEXPERIENCE R2025x.
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Enovia Product Manager