CVE-2025-0826: Stored Cross-site Scripting (XSS) vulnerability affecting 3D Navigate in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x
A stored Cross-site Scripting (XSS) vulnerability affecting 3D Navigate in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0826?
CVE-2025-0826 has been classified as a medium severity vulnerability due to its impact on user sessions through stored XSS.
How do I fix CVE-2025-0826?
To fix CVE-2025-0826, update ENOVIA Collaborative Industry Innovator to a version beyond R2024x.
What systems are affected by CVE-2025-0826?
CVE-2025-0826 affects Dassault Systèmes ENOVIA Collaborative Industry Innovator versions from R2022x to R2024x.
What type of attack does CVE-2025-0826 enable?
CVE-2025-0826 enables a stored Cross-site Scripting (XSS) attack that allows an attacker to execute arbitrary script code in the user's browser.
What are the potential risks of CVE-2025-0826?
The potential risks of CVE-2025-0826 include unauthorized access to user data and the ability to perform actions on behalf of the user.