exploitDog

CVE-2025-10556

Опубликовано: 13 окт. 2025

Источник: nvd

CVSS3: 8.7

CVSS3: 5.4

EPSS Низкий

Описание

A stored Cross-site Scripting (XSS) vulnerability affecting Specification Management in ENOVIA Specification Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.

Ссылки

https://www.3ds.com/trust-center/security/security-advisories/cve-2025-10556
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:3ds:3dexperience_enovia:*:*:*:*:*:*:*:*

Версия от r2023x (включая) до r2025x (включая)

EPSS

Процентиль: 13%

0.00043

Низкий

8.7 High

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-mxjx-prgx-c6v2

CVSS3: 8.7

github

4 месяца назад

A stored Cross-site Scripting (XSS) vulnerability affecting Specification Management in ENOVIA Specification Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.

EPSS

Процентиль: 13%

0.00043

Низкий

8.7 High

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-79