CVE-2023-5599

A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2023x allows an attacker to execute arbitrary script code.

Score

CVSS 3.1 5.4 Medium

Status

Modified - 3DS.Information-Security@3ds.com

Published

2023-11-21

Last modified

2024-08-07

Weaknesses

CWE-79

Affected products

• 3dswymer 3dexperience 2022 (Dassault)
• 3dswymer 3dexperience 2023 (Dassault)
• 3dswymer (Dassault Systmes)

References

• https://www.3ds.com/vulnerability/advisories