CVE-2025-10555: Stored Cross-site Scripting (XSS) vulnerability affecting Service Items Management in DELMIA Service Process Engineer on Release 3DEXPERIENCE R2025x
A stored Cross-site Scripting (XSS) vulnerability affecting Service Items Management in DELMIA Service Process Engineer on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10555?
CVE-2025-10555 is classified as a stored Cross-site Scripting (XSS) vulnerability, which can lead to significant security risks for users.
How do I fix CVE-2025-10555?
To fix CVE-2025-10555, users should update to the latest version of DELMIA Service Process Engineer provided by Dassault Systèmes.
Who is affected by CVE-2025-10555?
CVE-2025-10555 affects users of Dassault Systèmes DELMIA Service Process Engineer on Release R2025x.
What types of attacks are possible with CVE-2025-10555?
CVE-2025-10555 allows attackers to execute arbitrary script code in a user's browser session, potentially compromising sensitive information.
Is there a workaround for CVE-2025-10555?
Currently, the best course of action for mitigating CVE-2025-10555 is to apply the official patch from Dassault Systèmes as no known workaround exists.