Reflected XSS Vulnerability in ENOVIAvpm Web Access by ENOVIA

CVE-2026-2101

What is CVE-2026-2101?

A reflected Cross-site Scripting (XSS) vulnerability exists in ENOVIAvpm Web Access, impacting versions 1 Release 16 to 1 Release 19. This flaw allows attackers to inject arbitrary script code, which can be executed in the victim’s browser session, potentially compromising user data and session integrity. It is crucial for organizations using affected versions to implement immediate security measures to mitigate risks associated with this vulnerability.

References