CVE-2025-10554: Stored Cross-site Scripting (XSS) vulnerability affecting Requirements in ENOVIA Product Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x
A stored Cross-site Scripting (XSS) vulnerability affecting Requirements in ENOVIA Product Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10554?
CVE-2025-10554 is a high-severity stored Cross-site Scripting (XSS) vulnerability.
How do I fix CVE-2025-10554?
To fix CVE-2025-10554, update to a version of ENOVIA Product Manager that is not affected, such as releases beyond R2025x.
What products are affected by CVE-2025-10554?
CVE-2025-10554 affects ENOVIA Product Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x.
What type of vulnerability is CVE-2025-10554?
CVE-2025-10554 is classified as a stored Cross-site Scripting (XSS) vulnerability.
Can CVE-2025-10554 lead to unauthorized actions?
Yes, CVE-2025-10554 can allow an attacker to execute arbitrary script code, potentially leading to unauthorized actions in a user's browser session.