CVE-2025-4985: Stored Cross-site Scripting (XSS) vulnerability affecting Risk Management in Project Portfolio Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x
A stored Cross-site Scripting (XSS) vulnerability affecting Risk Management in Project Portfolio Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4985?
CVE-2025-4985 is classified as a moderate severity stored Cross-site Scripting (XSS) vulnerability.
How do I fix CVE-2025-4985?
To mitigate CVE-2025-4985, update your 3DEXPERIENCE platform to the latest release that addresses this vulnerability.
What software is affected by CVE-2025-4985?
CVE-2025-4985 affects Risk Management in the 3DEXPERIENCE platform from release R2022x through R2025x.
What kind of attack is possible with CVE-2025-4985?
CVE-2025-4985 allows an attacker to execute arbitrary script code in a user's browser session.
When was CVE-2025-4985 disclosed?
CVE-2025-4985 was disclosed in 2025, highlighting its impact on the 3DEXPERIENCE platform.