CVE-2025-10557
BaseFortify
Publication date: 2025-10-13
Last updated on: 2025-10-21
Assigner: Dassault Systèmes
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| 3ds | 3dexperience_enovia | From r2023x (inc) to r2025x (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-79 | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a stored Cross-site Scripting (XSS) issue in the Issue Management component of ENOVIA Collaborative Industry Innovator (versions from 3DEXPERIENCE Release R2022x through R2025x). It allows an attacker to inject and execute arbitrary script code in the browser session of a user, which can compromise user data or session integrity. [1]
How can this vulnerability impact me? :
Exploiting this vulnerability can allow an attacker to execute malicious scripts in your browser session, potentially leading to theft or manipulation of user data, hijacking of user sessions, and other security breaches that compromise the confidentiality and integrity of your information. [1]