CVE-2025-10556: Stored Cross-site Scripting (XSS) vulnerability affecting Specification Management in ENOVIA Specification Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x
A stored Cross-site Scripting (XSS) vulnerability affecting Specification Management in ENOVIA Specification Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10556?
CVE-2025-10556 is classified as a stored Cross-site Scripting (XSS) vulnerability with the potential for high impact in vulnerable systems.
How do I fix CVE-2025-10556?
To mitigate CVE-2025-10556, apply the latest security patches provided by Dassault Systèmes for ENOVIA Specification Manager.
What versions are affected by CVE-2025-10556?
CVE-2025-10556 affects ENOVIA Specification Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x.
What impact could CVE-2025-10556 have on users?
If exploited, CVE-2025-10556 allows attackers to execute arbitrary scripts in users' browsers, potentially leading to data theft or session hijacking.
How can I determine if my system is vulnerable to CVE-2025-10556?
Check if your version of ENOVIA Specification Manager falls between R2023x and R2025x, as this indicates vulnerability to CVE-2025-10556.