ZeroHour

CVE-2025-0600

CVSS 3.1
5.4 medium
EPSS
<1%p16
Published
()
Modified
Description

A stored Cross-site Scripting (XSS) vulnerability affecting Product Explorer in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.

Vendors
3ds
Products
3dexperience enovia
Weakness
CWE-79
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

In the news

No ingested article mentions this CVE yet.