Stored Cross-site Scripting Vulnerability in ENOVIA Collaborative Industry Innovator
CVE-2025-0829

Currently unrated

Key Information:

Vendor: Dassault Systèmes
Status: ENOVIA Collaborative Industry Innovator
Vendor: CVE Published:; 17 March 2025

🔔 Create Dassault Systèmes Vulnerability Alert

What is CVE-2025-0829?

A stored Cross-site Scripting (XSS) vulnerability has been identified in the 3D Markup feature of ENOVIA Collaborative Industry Innovator. This issue affects various releases, enabling attackers to inject and execute arbitrary scripts in the browser sessions of users. Exploiting this vulnerability could lead to unauthorized actions and exposure of sensitive information, highlighting the need for robust security measures in the affected products.

References

https://www.3ds.com/vulnerability/advisories

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Mar 17, 2025