CVE-2025-26127

A stored cross-site scripting XSS vulnerability in the Send for Approval function of FileCloud v23.241.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

Dassault Systèmes ENOVIA Collaborative Industry Innovator 安全漏洞

Dassault Systèmes ENOVIA Collaborative Industry Innovator is an essential toolset for real-time, secure and structured collaboration and product content management for an engineering team at Dassault Systèmes France. A security vulnerability exists in Dassault Systèmes ENOVIA Collaborative Indust...

FileCloud 安全漏洞

FileCloud is an ultra-secure content collaboration platform from US-based FileCloud, Inc. offering industry-leading compliance, data governance, data leakage protection, data retention and digital rights management capabilities. A security vulnerability exists in FileCloud version v23.241.2, whic...

Dassault Systèmes ENOVIA Collaborative Industry Innovator 安全漏洞

Dassault Systèmes ENOVIA Collaborative Industry Innovator is an important toolset for real-time, secure and structured collaboration and product content management for an engineering team at Dassault Systèmes France. A security vulnerability exists in Dassault Systèmes ENOVIA Collaborative Indust...

PT-2025-11495

Name of the Vulnerable Software and Affected Versions ENOVIA Product Engineering Specialist versions 3DEXPERIENCE R2022x through 3DEXPERIENCE R2024x Description A stored Cross-site Scripting XSS vulnerability allows an attacker to execute arbitrary script code in a user's browser session. This...

PT-2025-11498

Name of the Vulnerable Software and Affected Versions ENOVIA Collaborative Industry Innovator versions R2022x through R2024x Description A stored Cross-site Scripting XSS vulnerability in Project Gantt allows an attacker to execute arbitrary script code in a user's browser session. This issue...

PT-2025-11487

Name of the Vulnerable Software and Affected Versions 3DSwymer's 3DDashboard versions Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x Description A stored Cross-site Scripting XSS issue allows an attacker to execute arbitrary script code in a user's browser session. This affects...

PT-2025-11494

Name of the Vulnerable Software and Affected Versions 3DSwymer versions Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x Description A stored Cross-site Scripting XSS vulnerability in 3DPlay allows an attacker to execute arbitrary script code in a user's browser session. This issue...

PT-2025-11488

Name of the Vulnerable Software and Affected Versions ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x Description A stored Cross-site Scripting XSS vulnerability affects the Bookmark Editor, allowing an attacker to execute arbitrary script code in a user's browser session...

PT-2025-11489

Name of the Vulnerable Software and Affected Versions ENOVIA Collaborative Industry Innovator versions 3DEXPERIENCE R2023x through 3DEXPERIENCE R2024x Description A stored Cross-site Scripting XSS vulnerability affects Relations in ENOVIA Collaborative Industry Innovator, allowing an attacker to...

Dassault Systèmes ENOVIA Collaborative Industry Innovator 安全漏洞

Dassault Systèmes ENOVIA Collaborative Industry Innovator is an essential toolset for real-time, secure and structured collaboration and product content management for an engineering team at Dassault Systèmes France. A security vulnerability exists in Dassault Systèmes ENOVIA Collaborative Indust...

CVE-2025-0600: Improper Neutralization of Input During Web Page Generation

A stored Cross-site Scripting XSS vulnerability affecting Product Explorer in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session...

CVE-2025-0599: Improper Neutralization of Input During Web Page Generation

A stored Cross-site Scripting XSS vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session...

CVE-2025-0598: Improper Neutralization of Input During Web Page Generation

A stored Cross-site Scripting XSS vulnerability affecting Relations in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session...

CVE-2025-0595: Improper Neutralization of Input During Web Page Generation

A stored Cross-site Scripting XSS vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session...

CVE-2025-0833: Improper Neutralization of Input During Web Page Generation

A stored Cross-site Scripting XSS vulnerability affecting Route Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session...

CVE-2025-0832: Improper Neutralization of Input During Web Page Generation

A stored Cross-site Scripting XSS vulnerability affecting Project Gantt in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session...

CVE-2025-0830: Improper Neutralization of Input During Web Page Generation

A stored Cross-site Scripting XSS vulnerability affecting Meeting Management in ENOVIA Change Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session...

CVE-2025-0829: Improper Neutralization of Input During Web Page Generation

A stored Cross-site Scripting XSS vulnerability affecting 3D Markup in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session...

CVE-2025-0828: Improper Neutralization of Input During Web Page Generation

A stored Cross-site Scripting XSS vulnerability affecting Engineering Release in ENOVIA Product Engineering Specialist from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session...