Stored Cross-site Scripting Vulnerability in ENOVIA Collaborative Industry Innovator by Dassault Systèmes
CVE-2025-0599

Currently unrated

Key Information:

Vendor

Dassault Systèmes

Status
ENOVIA Collaborative Industry Innovator
Vendor
CVE Published:
17 March 2025

What is CVE-2025-0599?

A stored Cross-site Scripting (XSS) vulnerability exists in the Document Management feature of ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x. This allows an attacker to inject and execute arbitrary script code within a user's browser session, potentially compromising user data and application integrity. Proper security measures should be implemented to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://www.3ds.com/vulnerability/advisories

Timeline

  • Vulnerability published

JSON
.