CVE-2025-4991: Stored Cross-site Scripting (XSS) vulnerability affecting 3D Markup in Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x
A stored Cross-site Scripting (XSS) vulnerability affecting 3D Markup in Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4991?
CVE-2025-4991 is identified as a critical vulnerability due to its potential for stored Cross-site Scripting (XSS) attacks.
How do I fix CVE-2025-4991?
To mitigate CVE-2025-4991, ensure you upgrade to the latest version of Dassault Systèmes 3D Markup in Collaborative Industry Innovator beyond Release R2025x.
What versions are affected by CVE-2025-4991?
CVE-2025-4991 affects Dassault Systèmes 3D Markup in Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x up to R2025x.
What type of attack does CVE-2025-4991 enable?
CVE-2025-4991 enables an attacker to execute arbitrary script code in a user's browser session, resulting in stored XSS attacks.
Who is the vendor for CVE-2025-4991?
The vendor for CVE-2025-4991 is Dassault Systèmes.