Approved changes feed: RSS · Atom

cpe:2.3:a:dassault_systèmes:service_process_engineer:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDassault Systèmes (fe2f633c-7f99-5ffa-b416-2f518d032717)
ProductService Process Engineer (bb01badb-ed1c-5d59-8c96-cff4169e520c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-4992 vulnerable 2026-06-03 15:01:49.136376 Stored Cross-site Scripting (XSS) vulnerability affecting Service Items Management in Service Process Engineer from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2025x
HIGH (8.7)
A stored Cross-site Scripting (XSS) vulnerability affecting Service Items Management in Service Process Engineer from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.
Published: 2025-05-30T14:15:45.186Z
Updated: 2025-05-30T22:00:31.561Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.