PT-2026-29207 · Dassault Systèmes · Delmia Factory Resource Manager

Publicado 2026-03-31 · Atualizado 2026-03-31 · CVE-2025-10553

Positive Technologies (AI Summary)

CVSS v3.1

8.7

Alta

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions DELMIA Factory Resource Manager versions 3DEXPERIENCE R2023x through 3DEXPERIENCE R2025x

Description A Stored Cross-site Scripting (XSS) issue exists in Factory Resource Management within DELMIA Factory Resource Manager. This allows an attacker to execute arbitrary script code within a user's browser session. The issue affects the application's handling of user-supplied data, potentially enabling malicious code injection.

Recommendations Update DELMIA Factory Resource Manager to a version later than 3DEXPERIENCE R2025x.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2025-10553

Produtos afetados

Delmia Factory Resource Manager

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-10553 · Nota de Segurança
• https://twitter.com/CveFindCom/status/2038914968351862915 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2038916014591852616 · Publicação no Twitter
• https://twitter.com/TheHackerWire/status/2038909459674849758 · Publicação no Twitter
• https://3ds.com/trust-center/security/security-advisories/cve-2025-10553 · Aviso do Fabricante