Stored Cross-site Scripting Vulnerability in ENOVIA Specification Manager by Dassault Systèmes

CVE-2025-10556

What is CVE-2025-10556?

A stored Cross-site Scripting (XSS) vulnerability exists in the ENOVIA Specification Manager, affecting the 3DEXPERIENCE platform from Releases R2023x to R2025x. This flaw enables an attacker to inject malicious scripts that could be executed in the browser sessions of users, resulting in unauthorized actions and data exposure. Organizations utilizing this product should implement security measures to mitigate the risk associated with this vulnerability.

References