Stored Cross-site Scripting Vulnerability in ENOVIA Product Manager by Dassault Systèmes

CVE-2025-10554

What is CVE-2025-10554?

A stored Cross-site Scripting (XSS) vulnerability found in the ENOVIA Product Manager enables attackers to inject and execute arbitrary scripts within the user's browser session. This can lead to unauthorized actions on behalf of users, posing significant risks to sensitive information and workflows. The vulnerability affects ENOVIA Product Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x, underscoring the importance of timely updates and security practices.

References