CVE-2025-0596: Stored Cross-site Scripting (XSS) vulnerability affecting Bookmark Editor in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x
A stored Cross-site Scripting (XSS) vulnerability affecting Bookmark Editor in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0596?
CVE-2025-0596 has been rated as a high-severity vulnerability due to its potential for widespread impact through stored Cross-site Scripting.
How do I fix CVE-2025-0596?
To mitigate CVE-2025-0596, update your ENOVIA Collaborative Industry Innovator to the latest version that addresses this vulnerability.
What systems are affected by CVE-2025-0596?
CVE-2025-0596 specifically affects the Bookmark Editor in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x.
What is the impact of CVE-2025-0596 on users?
Users could experience unauthorized script execution in their browser session, leading to data theft or session hijacking due to CVE-2025-0596.
Is CVE-2025-0596 remotely exploitable?
Yes, CVE-2025-0596 can be exploited remotely, allowing attackers to execute scripts without physical access to the user's device.