Stored Cross-site Scripting Vulnerability in 3DSwym by Dassault Systèmes
CVE-2025-10552

8.7HIGH

Key Information:

Vendor

Dassault Systèmes

Status
3dswymer
Vendor
CVE Published:
13 October 2025

What is CVE-2025-10552?

A stored Cross-site Scripting (XSS) vulnerability exists in 3DSwym on the 3DEXPERIENCE R2025x platform, which could allow an attacker to inject and execute arbitrary script code within a user's browser session. This vulnerability poses a significant risk as it can enable attackers to manipulate user interactions and potentially gain unauthorized access to sensitive information.

Affected Version(s)

3DSwymer Release 3DEXPERIENCE R2025x Golden

References

https://www.3ds.com/trust-center/security/security-adviso...

CVSS V3.1

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-10552 : Stored Cross-site Scripting Vulnerability in 3DSwym by Dassault Systèmes