CVE-2025-0595: Improper Neutralization of Input During Web Page Generation

A stored Cross-site Scripting XSS vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session...

PT-2025-11499

Name of the Vulnerable Software and Affected Versions ENOVIA Collaborative Industry Innovator versions 3DEXPERIENCE R2023x through 3DEXPERIENCE R2024x Description A stored Cross-site Scripting XSS vulnerability affects Route Management in ENOVIA Collaborative Industry Innovator, allowing an...

PT-2025-11491

Name of the Vulnerable Software and Affected Versions ENOVIA Collaborative Industry Innovator version R2024x Description A stored Cross-site Scripting XSS vulnerability in Product Explorer allows an attacker to execute arbitrary script code in a user's browser session. Recommendations For version...

PT-2025-11497

Name of the Vulnerable Software and Affected Versions ENOVIA Change Manager versions 3DEXPERIENCE R2022x through 3DEXPERIENCE R2024x Description A stored Cross-site Scripting XSS vulnerability in Meeting Management allows an attacker to execute arbitrary script code in a user's browser session...

PT-2025-11490

Name of the Vulnerable Software and Affected Versions ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x Description A stored Cross-site Scripting XSS vulnerability affecting Document Management allows an attacker to execute arbitrary script code in a user's browser session...

PT-2025-11489

Name of the Vulnerable Software and Affected Versions ENOVIA Collaborative Industry Innovator versions 3DEXPERIENCE R2023x through 3DEXPERIENCE R2024x Description A stored Cross-site Scripting XSS vulnerability affects Relations in ENOVIA Collaborative Industry Innovator, allowing an attacker to...

PT-2025-11498

Name of the Vulnerable Software and Affected Versions ENOVIA Collaborative Industry Innovator versions R2022x through R2024x Description A stored Cross-site Scripting XSS vulnerability in Project Gantt allows an attacker to execute arbitrary script code in a user's browser session. This issue...

PT-2025-11494

Name of the Vulnerable Software and Affected Versions 3DSwymer versions Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x Description A stored Cross-site Scripting XSS vulnerability in 3DPlay allows an attacker to execute arbitrary script code in a user's browser session. This issue...

PHPGurukul Human Metapneumovirus Testing Management System Code Injection Vulnerability

PHPGurukul Human Metapneumovirus Testing Management System is a human subpneumovirus testing management system from PHPGurukul, Inc. A code injection vulnerability exists in version 1.0 of the PHPGurukul Human Metapneumovirus Testing Management System, which originates from cross-site scripting a...

FS S3150-8T2F Cross-site Scripting Vulnerability

FS S3150-8T2F is a switch from FS. A cross-site scripting vulnerability exists in versions prior to FS S3150-8T2F S3150-8T2F2.2.0D135103, which originates from cross-site scripting and could lead to arbitrary script execution...

Dassault Systèmes ENOVIA Collaborative Industry Innovator security vulnerabilities

Dassault Systèmes ENOVIA Collaborative Industry Innovator is an essential toolset for real-time, secure and structured collaboration and product content management for an engineering team at Dassault Systèmes France. A security vulnerability exists in Dassault Systèmes ENOVIA Collaborative Indust...

Mercurial SCM code injection vulnerability

Mercurial SCM is a free distributed source code control management tool from Mercurial SCM open source. A code injection vulnerability exists in Mercurial SCM version 4.5.3/71.19.145.211, which originates from cross-site scripting and could lead to a remote attacker executing arbitrary script in ...

PT-2025-11492

Name of the Vulnerable Software and Affected Versions ENOVIA Collaborative Industry Innovator versions 3DEXPERIENCE R2022x through 3DEXPERIENCE R2024x Description A stored Cross-site Scripting XSS vulnerability affects Issue Management in ENOVIA Collaborative Industry Innovator, allowing an...

CVE-2025-0829: Improper Neutralization of Input During Web Page Generation

A stored Cross-site Scripting XSS vulnerability affecting 3D Markup in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session...

Dassault Systèmes ENOVIA Collaborative Industry Innovator security vulnerabilities

Dassault Systèmes ENOVIA Collaborative Industry Innovator is an essential toolset for real-time, secure and structured collaboration and product content management for an engineering team at Dassault Systèmes France. A security vulnerability exists in Dassault Systèmes ENOVIA Collaborative Indust...

CVE-2025-0828: Improper Neutralization of Input During Web Page Generation

A stored Cross-site Scripting XSS vulnerability affecting Engineering Release in ENOVIA Product Engineering Specialist from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session...

Dassault Systèmes ENOVIA Collaborative Industry Innovator Cross-site Scripting Vulnerability

Dassault Systèmes ENOVIA Collaborative Industry Innovator is an essential toolset for real-time, secure and structured collaboration and product content management for an engineering team at Dassault Systèmes, France. A cross-site scripting vulnerability exists in Dassault Systèmes ENOVIA...

CVE-2025-25612

FS Inc S3150-8T2F prior to version S3150-8T2F2.2.0D135103 is vulnerable to Cross Site Scripting XSS in the Time Range Configuration functionality of the administration interface. An attacker can inject malicious JavaScript into the "Time Range Name" field, which is improperly sanitized. When this...

PT-2025-11496

Name of the Vulnerable Software and Affected Versions ENOVIA Collaborative Industry Innovator versions 3DEXPERIENCE R2022x through 3DEXPERIENCE R2024x Description A stored Cross-site Scripting XSS vulnerability in the 3D Markup component of ENOVIA Collaborative Industry Innovator allows an attack...

Dassault Systèmes ENOVIA Collaborative Industry Innovator security vulnerabilities

Dassault Systèmes ENOVIA Collaborative Industry Innovator is an essential toolset for real-time, secure and structured collaboration and product content management for an engineering team at Dassault Systèmes France. A security vulnerability exists in Dassault Systèmes ENOVIA Collaborative Indust...