Lucene search
HistorySep 02, 2024 - 12:15 p.m.
CVE-2024-7938
stored cross-site scripting
3ddashboard
3dswymer
3dexperience r2023x
3dexperience r2024x
arbitrary script code
user's browser session
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0
Percentile
14.7%
A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user’s browser session.
Affected configurations
Node
3ds3dexperienceMatchr2023x
OR3ds3dexperienceMatchr2024x
| Vendor | Product | Version | CPE |
|---|---|---|---|
| 3ds | 3dexperience | r2023x | cpe:2.3:a:3ds:3dexperience:r2023x:*:*:*:*:*:*:* |
| 3ds | 3dexperience | r2024x | cpe:2.3:a:3ds:3dexperience:r2024x:*:*:*:*:*:*:* |
References
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0
Percentile
14.7%
Related for NVD:CVE-2024-7938