exploitDog

CVE-2025-10557

Опубликовано: 13 окт. 2025

Источник: nvd

CVSS3: 8.7

CVSS3: 5.4

EPSS Низкий

Описание

A stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.

Ссылки

https://www.3ds.com/trust-center/security/security-advisories/cve-2025-10557
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:3ds:3dexperience_enovia:*:*:*:*:*:*:*:*

Версия от r2023x (включая) до r2025x (включая)

EPSS

Процентиль: 13%

0.00043

Низкий

8.7 High

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

GHSA-2f9r-qphv-m38c

CVSS3: 8.7

github

4 месяца назад

A stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.

EPSS

Процентиль: 13%

0.00043

Низкий

8.7 High

CVSS3

5.4 Medium

CVSS3

Дефекты

CWE-79