CVE-2025-10552
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-10-13

Last updated on: 2025-12-04

Assigner: Dassault Systèmes

Description
A stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-10-13
Last Modified
2025-12-04
Generated
2026-06-16
AI Q&A
2025-10-13
EPSS Evaluated
2026-06-15
NVD
CVE-2025-10552
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
3ds 3dswymer r2025x
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-79 The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

CVE-2025-10552 is a stored Cross-site Scripting (XSS) vulnerability in the 3DSwym component of 3DSwymer on the 3D EXPERIENCE platform (Release R2025x). It allows an attacker to inject and execute arbitrary script code within a user's browser session. [1]

Impact Analysis

This vulnerability can impact you by allowing attackers to execute arbitrary scripts in your browser session, which can lead to compromise of user data or session integrity. [1]

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-10552. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart