PT-2026-29205 · Dassault Systèmes · Enovia Collaborative Industry Innovator+1
CVE-2025-10551
·
Publicado
2026-03-31
·
Atualizado
2026-03-31
CVSS v3.1
8.7
Alta
| Vetor | AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
ENOVIA Collaborative Industry Innovator versions 3DEXPERIENCE R2023x through 3DEXPERIENCE R2025x
Description
A Stored Cross-site Scripting (XSS) issue exists in the Document Management component of the software. This allows an attacker to execute arbitrary script code within a user's browser session.
Recommendations
Update ENOVIA Collaborative Industry Innovator to a version later than 3DEXPERIENCE R2025x.
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
3Dexperience
Enovia Collaborative Industry Innovator