CVE-2024-6378 Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x

[
  {
    "vendor": "Dassault Systèmes",
    "product": "ENOVIA Collaborative Industry Innovator",
    "versions": [
      {
        "status": "affected",
        "version": "Release 3DEXPERIENCE R2022x Golden",
        "versionType": "custom",
        "lessThanOrEqual": "Release 3DEXPERIENCE R2022x.FP.CFA.2424"
      },
      {
        "status": "affected",
        "version": "Release 3DEXPERIENCE R2023x Golden",
        "versionType": "custom",
        "lessThanOrEqual": "Release 3DEXPERIENCE R2023x.FP.CFA.2419"
      },
      {
        "status": "affected",
        "version": "Release 3DEXPERIENCE R2024x Golden",
        "versionType": "custom",
        "lessThanOrEqual": "Release 3DEXPERIENCE R2024x.FP.CFA.2424"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

[
  {
    "cpes": [
      "cpe:2.3:a:enovia:collaborative_industry_innovator:*:*:*:*:*:*:*:*"
    ],
    "vendor": "enovia",
    "product": "collaborative_industry_innovator",
    "versions": [
      {
        "status": "affected",
        "version": "3dexperience_r2022x",
        "versionType": "custom",
        "lessThanOrEqual": "3dexperience_r2024x"
      }
    ],
    "defaultStatus": "unknown"
  }
]