PT-2025-11491
CVE-2025-0600
·
Published
2025-03-17
·
Updated
2025-10-22
Description by
CVSS 3.1
8.7
HighMetricsAV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
ENOVIA Collaborative Industry Innovator version R2024x
Description
A stored Cross-site Scripting (XSS) vulnerability in Product Explorer allows an attacker to execute arbitrary script code in a user's browser session.
Recommendations
For version R2024x, consider disabling the Product Explorer feature until a patch is available to prevent exploitation of the stored XSS vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾