Stored Cross-site Scripting Vulnerability in ENOVIA Collaborative Industry Innovator by Dassault Systèmes
CVE-2025-0599

Currently unrated

Key Information:

Vendor: Dassault Systèmes
Status: ENOVIA Collaborative Industry Innovator
Vendor: CVE Published:; 17 March 2025

🔔 Create Dassault Systèmes Vulnerability Alert

What is CVE-2025-0599?

A stored Cross-site Scripting (XSS) vulnerability exists in the Document Management feature of ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x. This allows an attacker to inject and execute arbitrary script code within a user's browser session, potentially compromising user data and application integrity. Proper security measures should be implemented to mitigate this risk.

References

https://www.3ds.com/vulnerability/advisories

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Mar 17, 2025