high8.7
CVE-2025-0600
A stored Cross-site Scripting (XSS) vulnerability affecting Product Explorer in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows a…
Impact
A stored Cross-site Scripting (XSS) vulnerability affecting Product Explorer in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| 3ds | 3dexperience Enovia | Version r2024x |