PT-2025-41766
CVE-2025-10556
·
Published
2025-10-13
·
Updated
2026-10-08
Description by
CVSS 3.1
8.7
HighMetricsAV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
ENOVIA Specification Manager versions 3DEXPERIENCE R2023x through 3DEXPERIENCE R2025x
Description
A stored Cross-site Scripting (XSS) issue exists in Specification Management within ENOVIA Specification Manager. This allows an attacker to execute arbitrary script code within a user’s browser session. The vulnerability affects the application’s handling of user-supplied data, potentially leading to malicious code injection.
Recommendations
Update ENOVIA Specification Manager to a version later than 3DEXPERIENCE R2025x.
Found an issue in the description? Have something to add? Feel free to write us 👾