Approved changes feed: RSS · Atom

cpe:2.3:a:3ds:3dexperience_enovia:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor3Ds (a9939414-06e3-5fa1-bcc5-88736000d6ea)
Product3Dexperience Enovia (38898a16-0147-5b5c-b01b-8704eea9f2bb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-12956 vulnerable 2026-06-08 07:04:31.367604 Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x
HIGH (8.7)
A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.
Published: 2025-12-08T08:38:45.621Z
Updated: 2025-12-08T18:00:24.968Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10557 vulnerable 2026-06-08 07:02:27.071923 Stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x
HIGH (8.7)
A stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.
Published: 2025-10-13T07:36:28.063Z
Updated: 2025-10-27T16:10:55.079Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10556 vulnerable 2026-06-08 07:02:27.071513 Stored Cross-site Scripting (XSS) vulnerability affecting Specification Management in ENOVIA Specification Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x
HIGH (8.7)
A stored Cross-site Scripting (XSS) vulnerability affecting Specification Management in ENOVIA Specification Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.
Published: 2025-10-13T07:36:19.327Z
Updated: 2025-10-14T14:56:28.760Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10554 vulnerable 2026-06-08 07:02:27.067687 Stored Cross-site Scripting (XSS) vulnerability affecting Requirements in ENOVIA Product Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x
HIGH (8.7)
A stored Cross-site Scripting (XSS) vulnerability affecting Requirements in ENOVIA Product Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.
Published: 2025-11-24T15:31:39.739Z
Updated: 2025-11-24T17:59:51.057Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0832 vulnerable 2026-06-08 07:02:25.658593 Stored Cross-site Scripting (XSS) vulnerability affecting Project Gantt in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x
HIGH (8.7)
A stored Cross-site Scripting (XSS) vulnerability affecting Project Gantt in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
Published: 2025-03-17T13:50:41.077Z
Updated: 2025-03-17T14:07:24.875Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0830 vulnerable 2026-06-08 07:02:25.656018 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0829 vulnerable 2026-06-08 07:02:25.653880 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0828 vulnerable 2026-06-08 07:02:25.653370 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0826 vulnerable 2026-06-08 07:02:25.650612 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0601 vulnerable 2026-06-08 07:02:24.932490 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7736 vulnerable 2026-06-08 06:58:23.337670 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-6380 vulnerable 2026-06-08 06:58:18.916015 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12091 vulnerable 2026-06-08 06:23:51.244632 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-12089 vulnerable 2026-06-08 06:23:51.241949 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.