PT-2025-23301 · Dsm · Multidisciplinary Optimization Engineer

Published 2025-05-30 · Updated 2025-05-30 · CVE-2025-4988

Positive Technologies (AI Summary)

CVSS v3.1

8.7

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Multidisciplinary Optimization Engineer versions 3DEXPERIENCE R2022x through 3DEXPERIENCE R2024x

Description A stored Cross-site Scripting (XSS) vulnerability affects Results Analytics in Multidisciplinary Optimization Engineer, allowing an attacker to execute arbitrary script code in a user's browser session. This issue enables attackers to run malicious code on user browsers.

Recommendations For versions 3DEXPERIENCE R2022x through 3DEXPERIENCE R2024x, consider disabling access to Results Analytics in Multidisciplinary Optimization Engineer until a patch is available to prevent the execution of arbitrary script code in user browser sessions.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2025-11564

CVE-2025-4988

Affected Products

Multidisciplinary Optimization Engineer

References · 6

• https://bdu.fstec.ru/vul/2025-11564 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-4988 · Security Note
• https://t.me/cvetracker/25021 · Telegram Post
• https://twitter.com/CVEnew/status/1928466836653248715 · Twitter Post
• https://twitter.com/CveFindCom/status/1928461619027234952 · Twitter Post
• https://3ds.com/vulnerability/advisories · Note