CVE-2026-9024: Stored Cross-site Scripting (XSS) vulnerability affecting Process Experience Studio in DELMIA Service Process Engineer from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x
A Stored Cross-site Scripting (XSS) vulnerability affecting Process Experience Studio in DELMIA Service Process Engineer from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x could allow an attacker to execute arbitrary script code in user's browser session.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-9024?
CVE-2026-9024 has a severity rating of 8.7, which is classified as high.
How do I fix CVE-2026-9024?
To mitigate CVE-2026-9024, it is recommended to update to the latest version of DELMIA Service Process Engineer that addresses the vulnerability.
What types of attacks are possible with CVE-2026-9024?
CVE-2026-9024 allows attackers to execute arbitrary script code in the user's browser session, leading to potential data theft or session hijacking.
Which software is affected by CVE-2026-9024?
CVE-2026-9024 affects the DELMIA Service Process Engineer software from Dassault Systèmes in versions from 3DEXPERIENCE R2024x to R2026x.
When was CVE-2026-9024 published?
CVE-2026-9024 was published on June 1, 2026.