CVE-2024-12089: Stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x
A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-12089?
CVE-2024-12089 is classified as a high-severity stored Cross-site Scripting (XSS) vulnerability.
How do I fix CVE-2024-12089?
To fix CVE-2024-12089, ensure you update ENOVIA Collaborative Industry Innovator to the latest patched release.
Which versions of ENOVIA Collaborative Industry Innovator are affected by CVE-2024-12089?
CVE-2024-12089 affects ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x.
What type of vulnerability is CVE-2024-12089?
CVE-2024-12089 is a stored Cross-site Scripting (XSS) vulnerability.
Can CVE-2024-12089 allow attackers to access sensitive user data?
Yes, CVE-2024-12089 can enable attackers to execute arbitrary script code, potentially compromising sensitive user data.