CVE-2025-0601: Stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x
A stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0601?
The severity of CVE-2025-0601 is rated as high due to its potential impact on user sessions through stored Cross-site Scripting.
How do I fix CVE-2025-0601?
To fix CVE-2025-0601, update your ENOVIA Collaborative Industry Innovator software to the latest version that addresses this vulnerability.
What are the affected versions in CVE-2025-0601?
CVE-2025-0601 affects ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x.
What type of attack does CVE-2025-0601 allow?
CVE-2025-0601 allows an attacker to execute arbitrary script code in the user's browser session through stored Cross-site Scripting.
Who is the vendor for CVE-2025-0601?
The vendor for CVE-2025-0601 is Dassault Systèmes.