Lucene search
HistoryNov 21, 2023 - 10:15 a.m.
CVE-2023-5598
3dswym
stored cross-site scripting
xss
3dexperience
r2022x
r2023x
arbitrary script code
vulnerabilities
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
22.5%
Stored Cross-site Scripting (XSS) vulnerabilities affecting 3DSwym in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2023x allow an attacker to execute arbitrary script code.
Affected configurations
Node
dassault3dswymer_3dexperience_2022Matchfp.cfa.2337
ORdassault3dswymer_3dexperience_2023Matchfp.cfa.2333
| Vendor | Product | Version | CPE |
|---|---|---|---|
| dassault | 3dswymer_3dexperience_2022 | fp.cfa.2337 | cpe:2.3:a:dassault:3dswymer_3dexperience_2022:fp.cfa.2337:*:*:*:*:*:*:* |
| dassault | 3dswymer_3dexperience_2023 | fp.cfa.2333 | cpe:2.3:a:dassault:3dswymer_3dexperience_2023:fp.cfa.2333:*:*:*:*:*:*:* |
References
Related
prion
prion
Cross site scripting
2023-11-21 10:15:00
cvelist
cvelist
cve
cve
CVE-2023-5598
2023-11-21 10:15:07
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
22.5%
Related for NVD:CVE-2023-5598