Lucene search
HistorySep 02, 2024 - 12:15 p.m.
CVE-2024-8004
cve-2024-8004
cross-site scripting
enovia
3dexperience
r2022x
r2024x
arbitrary script execution
browser session
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0
Percentile
14.7%
A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user’s browser session.
Affected configurations
Node
3ds3dexperience_enoviaMatchr2022x
OR3ds3dexperience_enoviaMatchr2023x
OR3ds3dexperience_enoviaMatchr2024x
| Vendor | Product | Version | CPE |
|---|---|---|---|
| 3ds | 3dexperience_enovia | r2022x | cpe:2.3:a:3ds:3dexperience_enovia:r2022x:*:*:*:*:*:*:* |
| 3ds | 3dexperience_enovia | r2023x | cpe:2.3:a:3ds:3dexperience_enovia:r2023x:*:*:*:*:*:*:* |
| 3ds | 3dexperience_enovia | r2024x | cpe:2.3:a:3ds:3dexperience_enovia:r2024x:*:*:*:*:*:*:* |
References
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS
0
Percentile
14.7%
Related for NVD:CVE-2024-8004