3Dexperience

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:3ds:3dexperience:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor3Ds (a9939414-06e3-5fa1-bcc5-88736000d6ea)
Product3Dexperience (218b228c-ae82-53df-a797-e42252c3156d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-1624 vulnerable 2026-06-08 06:27:13.792142 OS Command Injection vulnerability affecting documentation server on certain Releases of 3DEXPERIENCE, SIMULIA Abaqus, SIMULIA Isight and CATIA Composer
CRITICAL (9.4)
An OS Command Injection vulnerability affecting documentation server on 3DEXPERIENCE from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x, SIMULIA Abaqus from Release 2022 through Release 2024, SIMULIA Isight from Release 2022 through Release 2024 and CATIA Composer from Release R2023 through Release R2024. A specially crafted HTTP request can lead to arbitrary command execution.
Published: 2024-03-01T15:47:43.521Z
Updated: 2024-08-28T15:01:15.090Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1996 vulnerable 2026-06-08 05:52:37.370567 Reflected Cross-site Scripting (XSS) vulnerability affecting Release 3DEXPERIENCE R2018x through Release 3DEXPERIENCE R2023x
MEDIUM (6.1)
A reflected Cross-site Scripting (XSS) vulnerability in Release 3DEXPERIENCE R2018x through Release 3DEXPERIENCE R2023x allows an attacker to execute arbitrary script code.
Published: 2023-05-19T16:37:20.133Z
Updated: 2025-02-12T16:26:33.345Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.