CVE-2024-7938: Stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x

Published Sep 2, 2024

Updated

A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.

Affected Software

2 affected components

3DS 3DEXPERIENCE=r2023x

3DS 3DEXPERIENCE=r2024x

Event History

Sep 2, 2024

CVE Published

via MITRE·11:48 AM

Data Sourced

via MITRE·11:48 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·12:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-7938?

CVE-2024-7938 is classified as a high severity vulnerability due to its potential to allow attackers to execute arbitrary scripts in users' browsers.

How do I fix CVE-2024-7938?

To fix CVE-2024-7938, apply the latest security patches provided by 3DSwymer for the affected 3DEXPERIENCE releases.

What systems are affected by CVE-2024-7938?

CVE-2024-7938 affects 3DDashboard in 3DSwymer versions from 3DEXPERIENCE R2023x to R2024x.

What type of vulnerability is CVE-2024-7938?

CVE-2024-7938 is a stored Cross-site Scripting (XSS) vulnerability.

Can CVE-2024-7938 impact user data?

Yes, CVE-2024-7938 can potentially compromise user data by allowing arbitrary script execution in the browser.