CVE-2025-0602: Stored Cross-site Scripting (XSS) vulnerability affecting Compare in Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x
A stored Cross-site Scripting (XSS) vulnerability affecting Compare in Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0602?
CVE-2025-0602 is classified as a high severity stored Cross-site Scripting (XSS) vulnerability.
How do I fix CVE-2025-0602?
To fix CVE-2025-0602, update your Dassault Systèmes Collaborative Industry Innovator software to a patched version released after R2025x.
Who is affected by CVE-2025-0602?
CVE-2025-0602 affects users of Dassault Systèmes Collaborative Industry Innovator versions from R2023x to R2025x.
What can attackers do with CVE-2025-0602?
Attackers can use CVE-2025-0602 to execute arbitrary script code in a user's browser session by exploiting the stored XSS vulnerability.
Is CVE-2025-0602 an active threat?
CVE-2025-0602 poses a significant threat to vulnerable systems, making it crucial to apply security updates promptly.