Reflected Cross-site Scripting Vulnerability in ENOVIA Collaborative Industry Innovator by Dassault Systèmes

CVE-2025-12956

What is CVE-2025-12956?

A reflected Cross-site Scripting (XSS) vulnerability in the ENOVIA Collaborative Industry Innovator enables attackers to inject and execute arbitrary scripts in the browser sessions of users. This issue spans from Release 3DEXPERIENCE R2022x through R2025x. By exploiting this vulnerability, an attacker could manipulate user interactions without authorization, potentially compromising sensitive information. Organizations utilizing the affected versions should implement security measures to mitigate risks associated with this vulnerability.

References