CVE-2025-0828: Stored Cross-site Scripting (XSS) vulnerability affecting Engineering Release in ENOVIA Product Engineering Specialist from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x
A stored Cross-site Scripting (XSS) vulnerability affecting Engineering Release in ENOVIA Product Engineering Specialist from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0828?
CVE-2025-0828 is classified as a high severity stored Cross-site Scripting (XSS) vulnerability.
How do I fix CVE-2025-0828?
To mitigate CVE-2025-0828, upgrade to a secure version of ENOVIA Product Engineering Specialist beyond Release 3DEXPERIENCE R2024x.
What versions are affected by CVE-2025-0828?
CVE-2025-0828 affects ENOVIA Product Engineering Specialist from Release 3DEXPERIENCE R2022x through R2024x.
What are the impacts of CVE-2025-0828?
CVE-2025-0828 can allow attackers to execute arbitrary script code in a user's browser session.
Is there a workaround for CVE-2025-0828?
There is no specific workaround for CVE-2025-0828; updating to a secure version is the recommended approach.