PT-2025-23297 · Unknown · 3Dexperience+1

Published 2025-05-30 · Updated 2025-05-30 · CVE-2025-4983

Positive Technologies (AI Summary)

CVSS v3.1

8.7

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions City Referential Manager on Release 3DEXPERIENCE R2025x

Description A stored Cross-site Scripting (XSS) vulnerability in City Referential Manager allows an attacker to execute arbitrary script code in a user's browser session. This enables the attacker to run code in the user's browser.

Recommendations For City Referential Manager on Release 3DEXPERIENCE R2025x, consider disabling the execution of scripts in the City Referential component until a patch is available. Restrict access to the City Referential Manager to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2025-11561

CVE-2025-4983

Affected Products

3Dexperience

City Referential Manager

References · 6

• https://bdu.fstec.ru/vul/2025-11561 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-4983 · Security Note
• https://3ds.com/vulnerability/advisories · Note
• https://t.me/cvetracker/25017 · Telegram Post
• https://twitter.com/CveFindCom/status/1928461806885863742 · Twitter Post
• https://twitter.com/CVEnew/status/1928466832249204928 · Twitter Post