Read the docs

Dassault Systèmes

Records120All Threatist records
Exploited (KEV)3In CISA KEV
CVSS critical17CVSS 9.0–10.0
CVSS high94CVSS 7.0–8.9

Exploited now

Dassault Systèmes records in CISA KEV
TI-2025-05612 Dassault Systèmes DELMIA Apriso Code Injection Vulnerability Priority CRITICAL 94KEV 2025-10-28TI-2025-05613 Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability Priority CRITICAL 98KEV 2025-10-28TI-2025-04561 Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability Priority CRITICAL 98KEV 2025-09-11

Components

Products in the NVD configurations · select one to filter the records
3dexperience Enovia 22 records MEDIUM 3dexperience 11 records MEDIUM Delmia Apriso 7 records CRITICAL Solidworks Edrawings 3 records LOW 3dexperience Solidworks 2 records LOW 3dswymer 2 records LOW Catia 2 records MEDIUM Enovia Live Collaboration 2 records MEDIUM

Records

11 records in 3dexperience · all components

TI-2023-01879 CVE-2023-1997 · GHSA-9fp3-x7mf-h9vj

OS command injection in Dassault Systèmes SIMULIA 3DOrchestrate

Priority MEDIUM 44

An OS Command Injection vulnerability exists in SIMULIA 3DOrchestrate from Release 3DEXPERIENCE R2021x through Release 3DEXPERIENCE R2023x.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01884 Published 2023-08-28 No fix listed CWE-78
TI-2024-05920 CVE-2024-6378 · GHSA-4v95-m49f-6w63

Cross-site scripting in Dassault Systèmes ENOVIA Collaborative Industry Innovator

Priority MEDIUM 40

A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script c…

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00369 Published 2024-08-20 No fix listed CWE-79
TI-2025-09663 CVE-2025-10559 · GHSA-8pjm-jgvr-53w9

Path traversal in Dassault Systèmes DELMIA Factory Resource Manager

Priority LOW 39

A Path Traversal vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to read or write files in sp…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00281 Published 2026-03-31 No fix listed CWE-22
TI-2025-09657 CVE-2025-10553 · GHSA-2g4m-9v5x-mfwr

Cross-site scripting in Dassault Systèmes DELMIA Factory Resource Manager

Priority LOW 39

A Stored Cross-site Scripting (XSS) vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execut…

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00169 Published 2026-03-31 No fix listed CWE-79
TI-2025-09655 CVE-2025-10551 · GHSA-438q-mm87-r2p9

Cross-site scripting in Dassault Systèmes ENOVIA Collaborative Industry Innovator

Priority LOW 39

A Stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execut…

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00169 Published 2026-03-31 No fix listed CWE-79
TI-2024-07360 CVE-2024-7938 · GHSA-gwr3-5wf2-xmf8

Cross-site scripting in Dassault Systèmes 3DSwymer

Priority LOW 39

A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's brows…

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00313 Published 2024-09-02 No fix listed CWE-79
TI-2024-05919 CVE-2024-6377 · GHSA-v735-hrpq-c278

Open redirect in Dassault Systèmes 3DSwymer

Priority LOW 37

An URL redirection to untrusted site (open redirect) vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to redirect users to an arbitrar…

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00279 Published 2024-08-20 No fix listed CWE-601
TI-2024-05921 CVE-2024-6379 · GHSA-v4cc-wwr9-44vw

Cross-site scripting in Dassault Systèmes 3DSwymer

Priority LOW 35

A reflected Cross-site Scripting (XSS) vulnerability affecting 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.

CVSS 3.1HIGH 7.7 Network Low privileges User interaction EPSS 0.00239 Published 2024-08-20 No fix listed CWE-79
TI-2023-01878 CVE-2023-1996 · GHSA-9464-hjjc-4v8w

Cross-site scripting in Dassault Systèmes 3DEXPERIENCE

Priority LOW 27

A reflected Cross-site Scripting (XSS) vulnerability in Release 3DEXPERIENCE R2018x through Release 3DEXPERIENCE R2023x allows an attacker to execute arbitrary script code.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00353 Published 2023-05-19 No fix listed CWE-79
Open these records in search →