CVE-2025-0833: Stored Cross-site Scripting (XSS) vulnerability affecting Route Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x
A stored Cross-site Scripting (XSS) vulnerability affecting Route Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0833?
CVE-2025-0833 is classified as a stored Cross-site Scripting (XSS) vulnerability that can significantly impact user security.
How do I fix CVE-2025-0833?
To fix CVE-2025-0833, apply the latest security patch provided by Dassault Systèmes for ENOVIA Collaborative Industry Innovator.
What versions are affected by CVE-2025-0833?
CVE-2025-0833 affects ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x.
What can an attacker achieve using CVE-2025-0833?
Using CVE-2025-0833, an attacker can execute arbitrary script code in a user's browser session, potentially compromising user data.
Is CVE-2025-0833 a remote exploitation vulnerability?
Yes, CVE-2025-0833 allows remote code execution via stored XSS, making it a serious concern for users of the affected software.