CVE-2025-4983: Stored Cross-site Scripting (XSS) vulnerability affecting City Referential in City Referential Manager on Release 3DEXPERIENCE R2025x

Published May 30, 2025
·
Updated

A stored Cross-site Scripting (XSS) vulnerability affecting City Referential in City Referential Manager on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.

Affected Software

1 affected component
Dassault Systèmes 3DEXPERIENCE

Event History

May 30, 2025
CVE Published
via MITRE·02:19 PM
Data Sourced
via MITRE·02:19 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeakness
Oct 13, 57397
Event
via FIRST·11:56 PM

Frequently Asked Questions

1

What is the severity of CVE-2025-4983?

CVE-2025-4983 is classified as a stored Cross-site Scripting (XSS) vulnerability, which can have a high severity due to its potential to execute arbitrary scripts in a user's browser session.

2

How do I fix CVE-2025-4983?

To fix CVE-2025-4983, it is recommended to apply the latest security patches provided by Dassault Systèmes for the 3DEXPERIENCE platform.

3

Which versions are affected by CVE-2025-4983?

CVE-2025-4983 affects the City Referential Manager within the 3DEXPERIENCE R2025x release.

4

What impact does CVE-2025-4983 have on users?

CVE-2025-4983 allows attackers to execute malicious scripts in victims' browsers, potentially compromising sensitive data and user sessions.

5

Is there a workaround for CVE-2025-4983?

Currently, the most effective mitigation for CVE-2025-4983 is to upgrade to the latest version or apply available security patches.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203