Important: Red Hat Security Advisory: libreoffice security update

An update for libreoffice is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

CVE-2025-26127

A stored cross-site scripting XSS vulnerability in the Send for Approval function of FileCloud v23.241.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

PT-2025-11488

Name of the Vulnerable Software and Affected Versions ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x Description A stored Cross-site Scripting XSS vulnerability affects the Bookmark Editor, allowing an attacker to execute arbitrary script code in a user's browser session...

CVE-2025-0833: Improper Neutralization of Input During Web Page Generation

A stored Cross-site Scripting XSS vulnerability affecting Route Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session...

CVE-2025-0832: Improper Neutralization of Input During Web Page Generation

A stored Cross-site Scripting XSS vulnerability affecting Project Gantt in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session...

CVE-2025-0830: Improper Neutralization of Input During Web Page Generation

A stored Cross-site Scripting XSS vulnerability affecting Meeting Management in ENOVIA Change Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session...

CVE-2025-0828: Improper Neutralization of Input During Web Page Generation

A stored Cross-site Scripting XSS vulnerability affecting Engineering Release in ENOVIA Product Engineering Specialist from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session...

CVE-2025-0827: Improper Neutralization of Input During Web Page Generation

A stored Cross-site Scripting XSS vulnerability affecting 3DPlay in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session...

CVE-2025-0826: Improper Neutralization of Input During Web Page Generation

A stored Cross-site Scripting XSS vulnerability affecting 3D Navigate in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session...

CVE-2025-0601: Improper Neutralization of Input During Web Page Generation

A stored Cross-site Scripting XSS vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session...

CVE-2025-0600: Improper Neutralization of Input During Web Page Generation

A stored Cross-site Scripting XSS vulnerability affecting Product Explorer in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session...

CVE-2025-0599: Improper Neutralization of Input During Web Page Generation

A stored Cross-site Scripting XSS vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session...

CVE-2025-0598: Improper Neutralization of Input During Web Page Generation

A stored Cross-site Scripting XSS vulnerability affecting Relations in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session...

CVE-2025-0595: Improper Neutralization of Input During Web Page Generation

A stored Cross-site Scripting XSS vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session...

PT-2025-11495

Name of the Vulnerable Software and Affected Versions ENOVIA Product Engineering Specialist versions 3DEXPERIENCE R2022x through 3DEXPERIENCE R2024x Description A stored Cross-site Scripting XSS vulnerability allows an attacker to execute arbitrary script code in a user's browser session. This...

PT-2025-11487

Name of the Vulnerable Software and Affected Versions 3DSwymer's 3DDashboard versions Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x Description A stored Cross-site Scripting XSS issue allows an attacker to execute arbitrary script code in a user's browser session. This affects...

PT-2025-11497

Name of the Vulnerable Software and Affected Versions ENOVIA Change Manager versions 3DEXPERIENCE R2022x through 3DEXPERIENCE R2024x Description A stored Cross-site Scripting XSS vulnerability in Meeting Management allows an attacker to execute arbitrary script code in a user's browser session...

PT-2025-11494

Name of the Vulnerable Software and Affected Versions 3DSwymer versions Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x Description A stored Cross-site Scripting XSS vulnerability in 3DPlay allows an attacker to execute arbitrary script code in a user's browser session. This issue...

PT-2025-11489

Name of the Vulnerable Software and Affected Versions ENOVIA Collaborative Industry Innovator versions 3DEXPERIENCE R2023x through 3DEXPERIENCE R2024x Description A stored Cross-site Scripting XSS vulnerability affects Relations in ENOVIA Collaborative Industry Innovator, allowing an attacker to...

PT-2025-11498

Name of the Vulnerable Software and Affected Versions ENOVIA Collaborative Industry Innovator versions R2022x through R2024x Description A stored Cross-site Scripting XSS vulnerability in Project Gantt allows an attacker to execute arbitrary script code in a user's browser session. This issue...