Stored Cross-site Scripting Vulnerability in Collaborative Industry Innovator by Dassault Systèmes
CVE-2025-0602

8.7HIGH

Key Information:

Vendor

Dassault Systèmes

Status
Collaborative Industry Innovator
Vendor
CVE Published:
30 May 2025

What is CVE-2025-0602?

A stored Cross-site Scripting (XSS) vulnerability in the Collaborative Industry Innovator affects versions from Release 3DEXPERIENCE R2023x to R2025x. This vulnerability allows attackers to inject and execute malicious scripts in the context of the user's browser session, potentially compromising user data and application integrity. It is critical for users of the affected products to apply necessary security measures and updates to mitigate this risk.

Affected Version(s)

Collaborative Industry Innovator Release 3DEXPERIENCE R2023x Golden

Collaborative Industry Innovator Release 3DEXPERIENCE R2024x Golden

Collaborative Industry Innovator Release 3DEXPERIENCE R2025x Golden

References

https://www.3ds.com/vulnerability/advisories

CVSS V3.1

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-0602 : Stored Cross-site Scripting Vulnerability in Collaborative Industry Innovator by Dassault Systèmes