Skip to contentDassault Systèmes vulnerabilities
Newest
- dassault systèmes tuleap enterprise editionSQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5CVE-2026-1054127.1 High
- dassault systèmes tuleap enterprise editionAuthorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5CVE-2026-1054118.1 High
- dassault systèmes tuleap enterprise editionStored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5CVE-2026-1054108.7 High
- dassault systèmes tuleap enterprise editionStored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5CVE-2026-1054098.7 High
- dassault systèmes tuleap enterprise editionStored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5CVE-2026-1054088.7 High
- dassault systèmes tuleap enterprise editionOS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5CVE-2026-1054078.8 High
- dassault systèmes geovia geospatial data managerCode Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026xCVE-2026-841549.9 Critical
- dassault systèmes tuleap enterprise editionOS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.3 through 17.5CVE-2026-842858.8 High
- dassault systèmes 3dswymerImproper Authorization vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026xCVE-2026-162799.3 Critical
- dassault systèmes tuleap enterprise editionUse of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5CVE-2026-198517.7 High
- dassault systèmes simulia execution engineDeserialization of Untrusted Data Vulnerability in SIMULIA Execution Engine from Release 2023 through Release 2026CVE-2026-1706110.0 Critical
- dassault systèmes station launcher app in 3dexperience platformDeserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026xCVE-2026-1175610.0 Critical
- dassault systèmes tuleap enterprise editionAuthorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5CVE-2026-141657.5 High
- dassault systèmes delmia aprisoImproper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026CVE-2026-96959.8 Critical
- dassault systèmes biovia workbookRace Condition vulnerability affecting BIOVIA Workbook from Release 2021 through Release 2026CVE-2026-51208.1 High
- dassault systèmes solidworks visualizePath Traversal vulnerability affecting SOLIDWORKS Visualize from SOLIDWORKS Desktop Release 2024 through SOLIDWORKS Desktop Release 2026CVE-2026-100949.8 Critical
- dassault systèmes delmia service process engineerStored Cross-site Scripting (XSS) vulnerability affecting Process Experience Studio in DELMIA Service Process Engineer from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026xCVE-2026-90248.7 High
- dassault systèmes magic collaboration studio, teamwork cloud - business edition, teamwork cloud - business pro edition +2 more +4 moreDeserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x throug…CVE-2026-78589.8 Critical
- 3ds 3dexperience, dassault systèmes delmia factory resource manager +1 morePath Traversal vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025xCVE-2025-105597.1 High
- 3ds 3dexperience, dassault systèmes delmia factory resource manager +1 moreStored Cross-site Scripting (XSS) vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025xCVE-2025-105538.7 High
- 3ds 3dexperience, dassault systèmes enovia collaborative industry innovator +1 moreStored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025xCVE-2025-105518.7 High
- 3ds solidworks, dassault systèmes solidworks desktop +1 moreCode Injection vulnerability affecting SOLIDWORKS Desktop from Release 2025 through Release 2026CVE-2026-34767.8 High
- dassault systèmes enoviavpm web accessReflected Cross-site Scripting (XSS) vulnerability affecting ENOVIAvpm Web Access from ENOVIAvpm Version 1 Release 16 through ENOVIAvpm Version 1 Release 19CVE-2026-21018.7 High
- 3ds solidworks edrawingsOut-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026CVE-2026-13357.8 High
- 3ds solidworks edrawingsOut-Of-Bounds Read vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026CVE-2026-13347.8 High
- 3ds solidworks edrawingsUse of Uninitialized Variable vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026CVE-2026-13337.8 High
- dassault systèmes solidworks edrawingsOut-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026CVE-2026-12847.8 High
- dassault systèmes solidworks edrawingsHeap-based Buffer Overflow vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026CVE-2026-12837.8 High
- dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 moreReflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025xCVE-2025-129568.7 High
- dassault systèmes delmia service process engineerStored Cross-site Scripting (XSS) vulnerability affecting Service Items Management in DELMIA Service Process Engineer on Release 3DEXPERIENCE R2025xCVE-2025-105558.7 High
- dassault systèmes enovia product manager, 3ds 3dexperience enovia +1 moreStored Cross-site Scripting (XSS) vulnerability affecting Requirements in ENOVIA Product Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025xCVE-2025-105548.7 High
- 3ds 3dswymerStored Cross-site Scripting (XSS) vulnerability affecting 3DSearch in 3DSwymer on Release 3DEXPERIENCE R2025xCVE-2025-105588.7 High
- dassault systèmes enovia collaborative industry innovator, 3ds 3dexperience enovia +1 moreStored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025xCVE-2025-105578.7 High
- dassault systèmes enovia specification manager, 3ds 3dexperience enovia +1 moreStored Cross-site Scripting (XSS) vulnerability affecting Specification Management in ENOVIA Specification Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025xCVE-2025-105568.7 High
- 3ds 3dswymerStored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2025xCVE-2025-105528.7 High
- dassault systèmes station launcher app in 3dexperience platformOS Command Injection vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025xCVE-2025-99769.0 Critical
- dassault systèmes solidworks edrawingsUse of Uninitialized Variable vulnerability affecting the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025CVE-2025-94507.8 High
- dassault systèmes solidworks edrawingsUse After Free vulnerability affecting the PAR file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025CVE-2025-94497.8 High
- dassault systèmes solidworks edrawingsOut-Of-Bounds Read affecting the PAR file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025CVE-2025-94477.8 High
- 3ds delmia aprisoMissing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025CVE-2025-6205In KEVEPSS 67.2%9.1 Critical
- 3ds delmia aprisoImproper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025CVE-2025-6204In KEVEPSS 76.8%8.0 High
- dassault systèmes solidworks edrawingsUse After Free vulnerability exists in the IPT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025CVE-2025-70427.8 High
- dassault systèmes solidworks edrawingsUse of Uninitialized Variable vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025CVE-2025-69747.8 High
- dassault systèmes solidworks edrawingsUse After Free vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025CVE-2025-69737.8 High
- dassault systèmes solidworks edrawingsUse After Free vulnerability exists in the CATPRODUCT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025CVE-2025-69727.8 High
- dassault systèmes solidworks edrawingsUse After Free vulnerability exists in the CATPRODUCT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025CVE-2025-69717.8 High
- dassault systèmes solidworks edrawingsOut-Of-Bounds Read vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025CVE-2025-08317.8 High
- dassault systèmes project portfolio managerStored Cross-site Scripting (XSS) vulnerability affecting Opportunity Management in Project Portfolio Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025xCVE-2025-49878.7 High
- 3ds delmia aprisoDeserialization of Untrusted Data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025CVE-2025-5086In KEVEPSS 97.2%9.0 Critical
- dassault systèmes collaborative industry innovatorStored Cross-site Scripting (XSS) vulnerability affecting Compare in Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025xCVE-2025-06028.7 High
- Show moreLoading…