Browse CVEs

MEDIUM 5.4 CVE-2024-7938 A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R20… 3dexperience Mitigation only Fix from $1,6002024-09-02 MEDIUM 5.4 CVE-2024-7939 A stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary… 3dexperience Mitigation only Fix from $1,6002024-09-02 MEDIUM 5.4 CVE-2024-8004 A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release … 3dexperience Enovia Mitigation only Fix from $1,6002024-09-02 MEDIUM 6.1 CVE-2024-6379 A reflected Cross-site Scripting (XSS) vulnerability affecting 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows a… 3dexperience Mitigation only Fix from $1,6002024-08-20 MEDIUM 5.4 CVE-2024-6378 A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Relea… 3dexperience Mitigation only Fix from $1,6002024-08-20 MEDIUM 6.1 CVE-2024-6377 An URL redirection to untrusted site (open redirect) vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2022x through Release … 3dexperience Mitigation only Fix from $1,6002024-08-20 HIGH 7.5 CVE-2023-3589 A Cross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x could allow wit… Teamwork Cloud No Magic Release Mitigation only Fix from $1,9502023-10-09 MEDIUM 5.4 CVE-2023-3588 A stored Cross-site Scripting (XSS) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x allows an attac… Teamwork Cloud No Magic Release Mitigation only Fix from $1,6002023-09-13 HIGH 8.8 CVE-2023-1997 An OS Command Injection vulnerability exists in SIMULIA 3DOrchestrate from Release 3DEXPERIENCE R2021x through Release 3DEXPERIENCE R2023x. A special… 3dexperience Mitigation only Fix from $1,9502023-08-28 MEDIUM 6.1 CVE-2023-1996 A reflected Cross-site Scripting (XSS) vulnerability in Release 3DEXPERIENCE R2018x through Release 3DEXPERIENCE R2023x allows an attacker to execute… 3dexperience Mitigation only Fix from $1,6002023-05-19 MEDIUM 6.1 CVE-2023-2139 A reflected Cross-site Scripting (XSS) Vulnerability in DELMIA Apriso Release 2017 through Release 2022 allows an attacker to execute arbitrary scrip… Delmia Apriso Mitigation only Fix from $1,6002023-04-21 CRITICAL 9.8 CVE-2023-1287 An XSL template vulnerability in ENOVIA Live Collaboration V6R2013xE allows Remote Code Execution. Enovia Live Collaboration No fix yet Fix from $2,3002023-03-09 HIGH 7.5 CVE-2023-1288 An XML External Entity injection (XXE) vulnerability in ENOVIA Live Collaboration V6R2013xE allows an attacker to read local files on the server. Enovia Live Collaboration Mitigation only Fix from $1,9502023-03-09 CRITICAL 9.8 CVE-2014-2072EPSS 7% Dassault Systemes Catia V5-6R2013: Stack Buffer Overflow due to inadequate boundary checks Catia No fix yet Fix from $2,3002020-01-08 CRITICAL 9.8 CVE-2014-2073 Stack-based buffer overflow in Dassault Systemes CATIA V5-6R2013 allows remote attackers to execute arbitrary code via a crafted packet, related to "… Catia No fix yet Fix from $2,3002018-04-10 MEDIUM 6.9 CVE-2012-4882 Multiple untrusted search path vulnerabilities in 3D XML Player 6.212.13.12076 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll… 3d Xml Player Mitigation only Fix from $1,6002012-09-07 MEDIUM 6.9 CVE-2012-4883 Multiple untrusted search path vulnerabilities in 3DVIA Composer V6R2012 HF1 Build 6.8.1.1652 allow local users to gain privileges via a Trojan horse… 3dvia Composer Mitigation only Fix from $1,6002012-09-07