Skip to content
3ds 3dexperience vulnerabilities
-
3ds 3dexperience, dassault systèmes delmia factory resource manager +1 more
Path Traversal vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x
CVE-2025-10559
7.1 High
-
3ds 3dexperience, dassault systèmes delmia factory resource manager +1 more
Stored Cross-site Scripting (XSS) vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x
CVE-2025-10553
8.7 High
-
3ds 3dexperience, dassault systèmes enovia collaborative industry innovator +1 more
Stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x
CVE-2025-10551
8.7 High
-
dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 more
Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x
CVE-2025-12956
8.7 High
-
dassault systèmes enovia product manager, 3ds 3dexperience enovia +1 more
Stored Cross-site Scripting (XSS) vulnerability affecting Requirements in ENOVIA Product Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x
CVE-2025-10554
8.7 High
-
dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 more
Stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x
CVE-2025-10557
8.7 High
-
dassault systèmes enovia specification manager, 3ds 3dexperience enovia +1 more
Stored Cross-site Scripting (XSS) vulnerability affecting Specification Management in ENOVIA Specification Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x
CVE-2025-10556
8.7 High
-
dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 more
Stored Cross-site Scripting (XSS) vulnerability affecting Route Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x
CVE-2025-0833
8.7 High
-
dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 more
Stored Cross-site Scripting (XSS) vulnerability affecting Project Gantt in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x
CVE-2025-0832
8.7 High
-
dassault systèmes enovia change manager, 3ds 3dexperience enovia +1 more
Stored Cross-site Scripting (XSS) vulnerability affecting Meeting Management in ENOVIA Change Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x
CVE-2025-0830
8.7 High
-
dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 more
Stored Cross-site Scripting (XSS) vulnerability affecting 3D Markup in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x
CVE-2025-0829
8.7 High
-
dassault systèmes enovia product engineering specialist, 3ds 3dexperience enovia +1 more
Stored Cross-site Scripting (XSS) vulnerability affecting Engineering Release in ENOVIA Product Engineering Specialist from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x
CVE-2025-0828
8.7 High
-
dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 more
Stored Cross-site Scripting (XSS) vulnerability affecting 3D Navigate in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x
CVE-2025-0826
8.7 High
-
dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 more
Stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x
CVE-2025-0601
8.7 High
-
dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 more
Stored Cross-site Scripting (XSS) vulnerability affecting Product Explorer in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x
CVE-2025-0600
8.7 High
-
dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 more
Stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x
CVE-2025-0599
8.7 High
-
dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 more
Stored Cross-site Scripting (XSS) vulnerability affecting Relations in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x
CVE-2025-0598
8.7 High
-
dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 more
Stored Cross-site Scripting (XSS) vulnerability affecting Bookmark Editor in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x
CVE-2025-0596
8.7 High
-
dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 more
Stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x
CVE-2024-12092
8.7 High
-
dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 more
Stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x
CVE-2024-12091
8.7 High
-
dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 more
Stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x
CVE-2024-12090
8.7 High
-
dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 more
Stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x
CVE-2024-12089
8.7 High
-
dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 more
Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x
CVE-2024-6380
8.7 High
-
dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 more
Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x
CVE-2024-7736
8.7 High
-
dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia, dassault 3dswymer 3dexperience 2022 +2 more +4 more
Stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x
CVE-2024-8004
8.7 High
-
3ds 3dexperience, dassault systèmes 3dswymer, dassault 3dswymer 3dexperience 2024 +2 more
Stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2024x
CVE-2024-7939
8.7 High
-
3ds 3dexperience, dassault systèmes 3dswymer, dassault 3dswymer 3dexperience 2023 +1 more +3 more
Stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x
CVE-2024-7938
8.7 High
-
3ds 3dexperience, dassault systèmes 3dswymer, dassault 3dswymer 3dexperience 2024 +2 more
Stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer on Release 3DEXPERIENCE R2024x
CVE-2024-7932
8.7 High
-
3ds 3dexperience, dassault systèmes 3dswymer, dassault 3dswymer 3dexperience 2022 +2 more +4 more
URL redirection to untrusted site (open redirect) vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x
CVE-2024-6377
8.1 High
-
3ds 3dexperience, dassault systèmes enovia collaborative industry innovator, enovia collaborative industry innovator +2 more
Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x
CVE-2024-6378
8.7 High
-
3ds 3dexperience, dassault systèmes 3dswymer, dassault 3dswymer 3dexperience 2022 +2 more +4 more
Reflected Cross-site Scripting (XSS) vulnerability affecting 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x
CVE-2024-6379
7.7 High
-
dassault systèmes solidworks desktop, 3ds 3dexperience solidworks +1 more
Multiple vulnerabilities exist in file reading procedure in SOLIDWORKS Desktop on Release SOLIDWORKS 2024
CVE-2024-1848
7.8 High
-
3ds 3dexperience, catia composer, simulia abaqus +2 more +4 more
OS Command Injection vulnerability affecting documentation server on certain Releases of 3DEXPERIENCE, SIMULIA Abaqus, SIMULIA Isight and CATIA Composer
CVE-2024-1624
9.4 Critical
-
3ds 3dexperience, dassault systèmes simulia 3dorchestrate +1 more
OS Command Injection vulnerability affecting SIMULIA 3DOrchestrate from Release 3DEXPERIENCE R2021x through Release 3DEXPERIENCE R2023x
CVE-2023-1997
8.8 High
-
dassault systèmes solidworks desktop, 3ds 3dexperience solidworks +1 more
Use-After-Free, Out-of-bounds Write and Heap-based Buffer Overflow vulnerabilities exist in the DWG and DXF file reading procedure in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SO…
CVE-2023-2763
7.8 High
-
dassault systèmes solidworks desktop, 3ds 3dexperience solidworks +1 more
Use-After-Free vulnerability in SLDPRT file reading procedure affecting SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023
CVE-2023-2762
7.8 High
-
3ds 3dexperience
Reflected Cross-site Scripting (XSS) vulnerability affecting Release 3DEXPERIENCE R2018x through Release 3DEXPERIENCE R2023x
CVE-2023-1996
6.1 Medium