PT-2026-29205 · Dassault Systèmes · Enovia Collaborative Industry Innovator

Published 2026-03-31 · Updated 2026-03-31 · CVE-2025-10551

Mitre

CVSS v3.1

8.7

High

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

A Stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-10551

Affected Products

Enovia Collaborative Industry Innovator

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2025-10551 · Security Note
• https://3ds.com/trust-center/security/security-advisories/cve-2025-10551 · Note