CVE-2025-4986: Stored Cross-site Scripting (XSS) vulnerability affecting Model Definition in Product Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x
A stored Cross-site Scripting (XSS) vulnerability affecting Model Definition in Product Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4986?
The severity of CVE-2025-4986 is critical due to the potential for an attacker to execute arbitrary script code in a user's browser.
How do I fix CVE-2025-4986?
To fix CVE-2025-4986, users should apply the latest security updates provided by Dassault Systèmes for the 3DEXPERIENCE software.
What systems are affected by CVE-2025-4986?
CVE-2025-4986 affects Dassault Systèmes 3DEXPERIENCE from Release R2022x through Release R2025x.
What type of vulnerability is CVE-2025-4986?
CVE-2025-4986 is classified as a stored Cross-site Scripting (XSS) vulnerability.
What is the impact of CVE-2025-4986 on users?
The impact of CVE-2025-4986 allows attackers to execute malicious scripts in the context of a user's browser session, potentially leading to data theft or session hijacking.