exploitDog

CVE-2025-10551

Опубликовано: 31 мар. 2026

Источник: nvd

CVSS3: 8.7

CVSS3: 5.4

EPSS Низкий

Описание

A Stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.

Ссылки

https://www.3ds.com/trust-center/security/security-advisories/cve-2025-10551
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:3ds:3dexperience:*:*:*:*:*:*:*:*

Версия от r2023x (включая) до r2025x (включая)

EPSS

Процентиль: 6%

0.00166

Низкий

8.7 High

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-438q-mm87-r2p9

CVSS3: 8.7

github

5 месяцев назад

A Stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.

EPSS

Процентиль: 6%

0.00166

Низкий

8.7 High

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-79