3ds vulnerabilities

Products

• 3dexperience Enovia 22
• 3dexperience 12
• Delmia Apriso 9
• 3dexperience Solidworks 3
• Edrawings 3
• Solidworks Edrawings 3
• 3dswymer 2
• Catia 2
• Enovia Live Collaboration 2
• Solidworks 2
• Teamwork Cloud No Magic Release 2

Newest

• 3ds 3dexperience, dassault systèmes delmia factory resource manager +1 more Path Traversal vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x CVE-2025-10559 7.1 HighMarch 31, 2026
• 3ds 3dexperience, dassault systèmes delmia factory resource manager +1 more Stored Cross-site Scripting (XSS) vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x CVE-2025-10553 8.7 HighMarch 31, 2026
• 3ds 3dexperience, dassault systèmes enovia collaborative industry innovator +1 more Stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x CVE-2025-10551 8.7 HighMarch 31, 2026
• 3ds solidworks, dassault systèmes solidworks desktop +1 more Code Injection vulnerability affecting SOLIDWORKS Desktop from Release 2025 through Release 2026 CVE-2026-3476 7.8 HighMarch 16, 2026
• 3ds solidworks edrawings Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 CVE-2026-1335 7.8 HighFebruary 16, 2026
• 3ds solidworks edrawings Out-Of-Bounds Read vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 CVE-2026-1334 7.8 HighFebruary 16, 2026
• 3ds solidworks edrawings Use of Uninitialized Variable vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 CVE-2026-1333 7.8 HighFebruary 16, 2026
• dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 more Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x CVE-2025-12956 8.7 HighDecember 8, 2025
• dassault systèmes enovia product manager, 3ds 3dexperience enovia +1 more Stored Cross-site Scripting (XSS) vulnerability affecting Requirements in ENOVIA Product Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x CVE-2025-10554 8.7 HighNovember 24, 2025
• 3ds 3dswymer Stored Cross-site Scripting (XSS) vulnerability affecting 3DSearch in 3DSwymer on Release 3DEXPERIENCE R2025x CVE-2025-10558 8.7 HighOctober 13, 2025
• dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 more Stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x CVE-2025-10557 8.7 HighOctober 13, 2025
• dassault systèmes enovia specification manager, 3ds 3dexperience enovia +1 more Stored Cross-site Scripting (XSS) vulnerability affecting Specification Management in ENOVIA Specification Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x CVE-2025-10556 8.7 HighOctober 13, 2025
• 3ds 3dswymer Stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2025x CVE-2025-10552 8.7 HighOctober 13, 2025
• 3ds delmia apriso Missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 CVE-2025-6205 In KEV EPSS 73.7% 9.1 CriticalAugust 4, 2025
• 3ds delmia apriso Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 CVE-2025-6204 In KEV EPSS 79.6% 8.0 HighAugust 4, 2025
• 3ds delmia apriso Deserialization of Untrusted Data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 CVE-2025-5086 In KEV EPSS 97.0% 9.0 CriticalJune 2, 2025
• dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 more Stored Cross-site Scripting (XSS) vulnerability affecting Route Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x CVE-2025-0833 8.7 HighMarch 17, 2025
• dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 more Stored Cross-site Scripting (XSS) vulnerability affecting Project Gantt in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x CVE-2025-0832 8.7 HighMarch 17, 2025
• dassault systèmes enovia change manager, 3ds 3dexperience enovia +1 more Stored Cross-site Scripting (XSS) vulnerability affecting Meeting Management in ENOVIA Change Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x CVE-2025-0830 8.7 HighMarch 17, 2025
• dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 more Stored Cross-site Scripting (XSS) vulnerability affecting 3D Markup in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x CVE-2025-0829 8.7 HighMarch 17, 2025
• dassault systèmes enovia product engineering specialist, 3ds 3dexperience enovia +1 more Stored Cross-site Scripting (XSS) vulnerability affecting Engineering Release in ENOVIA Product Engineering Specialist from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x CVE-2025-0828 8.7 HighMarch 17, 2025
• dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 more Stored Cross-site Scripting (XSS) vulnerability affecting 3D Navigate in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x CVE-2025-0826 8.7 HighMarch 17, 2025
• dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 more Stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x CVE-2025-0601 8.7 HighMarch 17, 2025
• dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 more Stored Cross-site Scripting (XSS) vulnerability affecting Product Explorer in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x CVE-2025-0600 8.7 HighMarch 17, 2025
• dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 more Stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x CVE-2025-0599 8.7 HighMarch 17, 2025
• dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 more Stored Cross-site Scripting (XSS) vulnerability affecting Relations in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x CVE-2025-0598 8.7 HighMarch 17, 2025
• dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 more Stored Cross-site Scripting (XSS) vulnerability affecting Bookmark Editor in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x CVE-2025-0596 8.7 HighMarch 17, 2025
• dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 more Stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x CVE-2024-12092 8.7 HighDecember 16, 2024
• dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 more Stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x CVE-2024-12091 8.7 HighDecember 16, 2024
• dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 more Stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x CVE-2024-12090 8.7 HighDecember 16, 2024
• dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 more Stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x CVE-2024-12089 8.7 HighDecember 16, 2024
• dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 more Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x CVE-2024-6380 8.7 HighOctober 16, 2024
• dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 more Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x CVE-2024-7736 8.7 HighSeptember 19, 2024
• dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia, dassault 3dswymer 3dexperience 2022 +2 more +4 more Stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x CVE-2024-8004 8.7 HighSeptember 2, 2024
• 3ds 3dexperience, dassault systèmes 3dswymer, dassault 3dswymer 3dexperience 2024 +2 more Stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2024x CVE-2024-7939 8.7 HighSeptember 2, 2024
• 3ds 3dexperience, dassault systèmes 3dswymer, dassault 3dswymer 3dexperience 2023 +1 more +3 more Stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x CVE-2024-7938 8.7 HighSeptember 2, 2024
• 3ds 3dexperience, dassault systèmes 3dswymer, dassault 3dswymer 3dexperience 2024 +2 more Stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer on Release 3DEXPERIENCE R2024x CVE-2024-7932 8.7 HighSeptember 2, 2024
• 3ds 3dexperience, dassault systèmes 3dswymer, dassault 3dswymer 3dexperience 2022 +2 more +4 more URL redirection to untrusted site (open redirect) vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x CVE-2024-6377 8.1 HighAugust 20, 2024
• 3ds 3dexperience, dassault systèmes enovia collaborative industry innovator, enovia collaborative industry innovator +2 more Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x CVE-2024-6378 8.7 HighAugust 20, 2024
• 3ds 3dexperience, dassault systèmes 3dswymer, dassault 3dswymer 3dexperience 2022 +2 more +4 more Reflected Cross-site Scripting (XSS) vulnerability affecting 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x CVE-2024-6379 7.7 HighAugust 20, 2024
• 3ds delmia apriso Pre-authentication Unsafe .NET object deserialization vulnerability affecting DELMIA Apriso Release 2019 through Release 2024 CVE-2024-3300 9.0 CriticalMay 30, 2024
• 3ds delmia apriso Post-authentication Unsafe .NET object deserialization vulnerability affecting DELMIA Apriso Release 2019 through Release 2024 CVE-2024-3301 8.5 HighMay 30, 2024
• 3ds edrawings Out-Of-Bounds Write, Use of Uninitialized Resource and Use-After-Free vulnerabilities exist in the SLDDRW and SLDPRT file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SO… CVE-2024-3299 7.8 HighApril 4, 2024
• 3ds edrawings Out-Of-Bounds Write and Type Confusion vulnerabilities exist in the DWG and DXF file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024 CVE-2024-3298 7.8 HighApril 4, 2024
• dassault systèmes solidworks desktop, 3ds 3dexperience solidworks +1 more Multiple vulnerabilities exist in file reading procedure in SOLIDWORKS Desktop on Release SOLIDWORKS 2024 CVE-2024-1848 7.8 HighMarch 22, 2024
• 3ds 3dexperience, catia composer, simulia abaqus +2 more +4 more OS Command Injection vulnerability affecting documentation server on certain Releases of 3DEXPERIENCE, SIMULIA Abaqus, SIMULIA Isight and CATIA Composer CVE-2024-1624 9.4 CriticalMarch 1, 2024
• 3ds edrawings, solidworks +1 more Multiple vulnerabilities exist in file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024 CVE-2024-1847 7.8 HighFebruary 28, 2024
• 3ds delmia apriso Insertion of Sensitive Information into Log File vulnerabilities affecting DELMIA Apriso Release 2019 through Release 2024 CVE-2024-0935 4.4 MediumFebruary 1, 2024
• 3ds biovia materials studio, dassault systèmes biovia materials studio products +1 more OS Command Injection vulnerability affecting BIOVIA Materials Studio products from Release BIOVIA 2021 through Release BIOVIA 2023 CVE-2023-6078 8.8 HighFebruary 1, 2024
• 3ds teamwork cloud no magic release, dassault teamwork cloud enterprise edition, teamwork cloud standard edition +6 more +8 more Cross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x CVE-2023-3589 6.8 MediumOctober 9, 2023
• Show olderLoading…