CVE-2025-4988: Stored Cross-site Scripting (XSS) vulnerability affecting Results Analytics in Multidisciplinary Optimization Engineer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x
A stored Cross-site Scripting (XSS) vulnerability affecting Results Analytics in Multidisciplinary Optimization Engineer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4988?
CVE-2025-4988 is considered a high-severity vulnerability due to its stored Cross-site Scripting (XSS) nature.
How do I fix CVE-2025-4988?
To fix CVE-2025-4988, it is recommended to update to a patched version of 3DEXPERIENCE beyond Release R2024x.
What impact does CVE-2025-4988 have on users?
CVE-2025-4988 allows an attacker to execute arbitrary script code in a user's browser session, compromising user data and security.
Which products are affected by CVE-2025-4988?
CVE-2025-4988 affects multiverse analytics within Dassault Systèmes' 3DEXPERIENCE from Release R2022x through Release R2024x.
Is there a workaround for CVE-2025-4988 until a fix is applied?
Currently, the only effective workaround for CVE-2025-4988 is to avoid using vulnerable features until an upgrade can be performed.