CVE-2024-7939

A stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.

Score

CVSS 3.1 8.7 High

Status

Modified - 3DS.Information-Security@3ds.com

Published

2024-09-02

Last modified

2024-09-13

Weaknesses

CWE-79

Affected products

• 3dexperience (3ds)
• 3dswymer 3dexperience 2024 (Dassault)
• 3dswymer (Dassault Systmes)

References

• https://www.3ds.com/vulnerability/advisories