Stored XSS Vulnerability in DELMIA Service Process Engineer by Dassault Systèmes

CVE-2025-10555

What is CVE-2025-10555?

A stored Cross-site Scripting vulnerability exists in the DELMIA Service Process Engineer software from Dassault Systèmes, specifically in the Service Items Management component. This flaw allows an attacker to inject and execute arbitrary script code within the user's browser session, potentially compromising user data and session integrity. Such vulnerabilities can be exploited if untrusted input is handled improperly, highlighting the need for vigilance in web security standards.

References