CVE-2025-4987: Stored Cross-site Scripting (XSS) vulnerability affecting Opportunity Management in Project Portfolio Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x
A stored Cross-site Scripting (XSS) vulnerability affecting Opportunity Management in Project Portfolio Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4987?
CVE-2025-4987 is classified as a high severity stored Cross-site Scripting (XSS) vulnerability.
How do I fix CVE-2025-4987?
To fix CVE-2025-4987, update your 3DEXPERIENCE software to the latest version released by Dassault Systèmes.
What versions of 3DEXPERIENCE are affected by CVE-2025-4987?
CVE-2025-4987 affects 3DEXPERIENCE versions from R2023x to R2025x.
What can an attacker do exploiting CVE-2025-4987?
An attacker can execute arbitrary script code in a user's browser session by exploiting CVE-2025-4987.
Is CVE-2025-4987 a new vulnerability?
CVE-2025-4987 is identified in recent releases of the 3DEXPERIENCE software, indicating it is a newly identified vulnerability.