CVE-2025-4983

A stored Cross-site Scripting (XSS) vulnerability affecting City Referential in City Referential Manager on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.

Score

CVSS 3.1 8.7 High

Status

Deferred - 3DS.Information-Security@3ds.com

Published

2025-05-30

Last modified

2025-05-30

Weaknesses

CWE-79

Affected products

• City Referential Manager (Dassault Systmes)

References

• https://www.3ds.com/vulnerability/advisories