Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

11 records

Vendor: Dassault Systèmes Component: 3dexperience Clear all filters
TI-2025-09663 CVE-2025-10559 · GHSA-8pjm-jgvr-53w9

Path traversal in Dassault Systèmes DELMIA Factory Resource Manager

Priority LOW 39

A Path Traversal vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to read or write files in sp…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00281 Published 2026-03-31 No fix listed CWE-22
TI-2025-09657 CVE-2025-10553 · GHSA-2g4m-9v5x-mfwr

Cross-site scripting in Dassault Systèmes DELMIA Factory Resource Manager

Priority LOW 39

A Stored Cross-site Scripting (XSS) vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execut…

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00169 Published 2026-03-31 No fix listed CWE-79
TI-2025-09655 CVE-2025-10551 · GHSA-438q-mm87-r2p9

Cross-site scripting in Dassault Systèmes ENOVIA Collaborative Industry Innovator

Priority LOW 39

A Stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execut…

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00169 Published 2026-03-31 No fix listed CWE-79
TI-2024-07360 CVE-2024-7938 · GHSA-gwr3-5wf2-xmf8

Cross-site scripting in Dassault Systèmes 3DSwymer

Priority LOW 39

A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's brows…

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00313 Published 2024-09-02 No fix listed CWE-79
TI-2024-05919 CVE-2024-6377 · GHSA-v735-hrpq-c278

Open redirect in Dassault Systèmes 3DSwymer

Priority LOW 37

An URL redirection to untrusted site (open redirect) vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to redirect users to an arbitrar…

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00279 Published 2024-08-20 No fix listed CWE-601
TI-2024-05920 CVE-2024-6378 · GHSA-4v95-m49f-6w63

Cross-site scripting in Dassault Systèmes ENOVIA Collaborative Industry Innovator

Priority MEDIUM 40

A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script c…

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00369 Published 2024-08-20 No fix listed CWE-79
TI-2024-05921 CVE-2024-6379 · GHSA-v4cc-wwr9-44vw

Cross-site scripting in Dassault Systèmes 3DSwymer

Priority LOW 35

A reflected Cross-site Scripting (XSS) vulnerability affecting 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.

CVSS 3.1HIGH 7.7 Network Low privileges User interaction EPSS 0.00239 Published 2024-08-20 No fix listed CWE-79
TI-2023-01879 CVE-2023-1997 · GHSA-9fp3-x7mf-h9vj

OS command injection in Dassault Systèmes SIMULIA 3DOrchestrate

Priority MEDIUM 44

An OS Command Injection vulnerability exists in SIMULIA 3DOrchestrate from Release 3DEXPERIENCE R2021x through Release 3DEXPERIENCE R2023x.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01884 Published 2023-08-28 No fix listed CWE-78
TI-2023-01878 CVE-2023-1996 · GHSA-9464-hjjc-4v8w

Cross-site scripting in Dassault Systèmes 3DEXPERIENCE

Priority LOW 27

A reflected Cross-site Scripting (XSS) vulnerability in Release 3DEXPERIENCE R2018x through Release 3DEXPERIENCE R2023x allows an attacker to execute arbitrary script code.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00353 Published 2023-05-19 No fix listed CWE-79