CVE-2025-4989: Stored Cross-site Scripting (XSS) vulnerability affecting Requirements in Product Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x
A stored Cross-site Scripting (XSS) vulnerability affecting Requirements in Product Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4989?
CVE-2025-4989 is considered to be a high-severity stored Cross-site Scripting (XSS) vulnerability.
How do I fix CVE-2025-4989?
To remediate CVE-2025-4989, ensure that you update to a patched version of the 3DEXPERIENCE software beyond Release R2025x.
What products are affected by CVE-2025-4989?
CVE-2025-4989 affects the Requirements feature in the 3DEXPERIENCE software from Releases R2022x through R2025x.
What type of vulnerability is CVE-2025-4989?
CVE-2025-4989 is a stored Cross-site Scripting (XSS) vulnerability that allows script execution in a user's browser.
Who is the vendor associated with CVE-2025-4989?
CVE-2025-4989 is associated with the vendor Dassault Systèmes and their 3DEXPERIENCE product.