Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 6

Export CSV
CVE-2024-7737

Stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x

A stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.

CVSS 3.1 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Dassault
Products
3dswymer 3dexperience 2022 3dswymer 3dexperience 2023 3dswymer 3dexperience 2024
CVE-2023-5599

Stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2023x

A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2023x allows an attacker to execute arbitrary script code.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Dassault
Products
3dswymer 3dexperience 2022 3dswymer 3dexperience 2023
CVE-2023-5598

Stored Cross-site Scripting (XSS) vulnerabilities affecting 3DSwym in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2023x

Stored Cross-site Scripting (XSS) vulnerabilities affecting 3DSwym in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2023x allow an attacker to execute arbitrary script code.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Dassault
Products
3dswymer 3dexperience 2022 3dswymer 3dexperience 2023
CVE-2024-8004

Stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x

A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.

CVSS 3.1 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
3ds Dassault
Products
3dexperience Enovia 3dswymer 3dexperience 2022 3dswymer 3dexperience 2023 and 1 more
CVE-2024-6379

Reflected Cross-site Scripting (XSS) vulnerability affecting 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x

A reflected Cross-site Scripting (XSS) vulnerability affecting 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.

CVSS 3.1 · 7.7 High EPSS < 1% KEV · Not listed
Vendors
3ds Dassault
Products
3dexperience 3dswymer 3dexperience 2022 3dswymer 3dexperience 2023 and 1 more
CVE-2024-6377

URL redirection to untrusted site (open redirect) vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x

An URL redirection to untrusted site (open redirect) vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to redirect users to an arbitrary website via a crafted URL.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
3ds Dassault
Products
3dexperience 3dswymer 3dexperience 2022 3dswymer 3dexperience 2023 and 1 more