CVE-2024-12090: Stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x

Published Dec 16, 2024

Updated

A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.

Affected Software

2 affected components

Dassault Systèmes ENOVIA Collaborative Industry Innovator

3DS 3dexperience Enovia=r2024x

Event History

Dec 16, 2024

CVE Published

via MITRE·03:06 PM

Data Sourced

via MITRE·03:06 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-12090?

CVE-2024-12090 is classified as a high-severity vulnerability due to its potential for stored Cross-site Scripting (XSS) attacks.

How do I fix CVE-2024-12090?

To fix CVE-2024-12090, users should upgrade to the latest secure version of ENOVIA Collaborative Industry Innovator as per the vendor's guidance.

What type of vulnerability is CVE-2024-12090?

CVE-2024-12090 is a stored Cross-site Scripting (XSS) vulnerability.

Who is affected by CVE-2024-12090?

CVE-2024-12090 affects users of ENOVIA Collaborative Industry Innovator on the 3DEXPERIENCE R2024x platform.

What are the potential risks of CVE-2024-12090?

The risks of CVE-2024-12090 include an attacker executing arbitrary script code in a user's browser session, leading to data theft and unauthorized actions.