CVE-2025-0600: Stored Cross-site Scripting (XSS) vulnerability affecting Product Explorer in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x
A stored Cross-site Scripting (XSS) vulnerability affecting Product Explorer in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0600?
CVE-2025-0600 is rated as a medium severity vulnerability due to its potential for stored cross-site scripting attacks.
How do I fix CVE-2025-0600?
To fix CVE-2025-0600, update the ENOVIA Collaborative Industry Innovator software to the latest patched version recommended by Dassault Systèmes.
What systems are affected by CVE-2025-0600?
CVE-2025-0600 affects the Product Explorer component in the ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x.
What impact does CVE-2025-0600 have on users?
CVE-2025-0600 allows attackers to execute arbitrary script code in a user's browser session, potentially leading to data theft or session hijacking.
Is there a workaround for CVE-2025-0600?
Currently, the recommended solution for CVE-2025-0600 is to apply the available software update, as no specific workaround has been provided.