PT-2026-8358 · Dassault Systèmes · Enoviavpm Web Access

Published 2026-02-16 · Updated 2026-02-21 · CVE-2026-2101

Positive Technologies (AI Summary)

CVSS v3.1

8.7

High

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions ENOVIAvpm Web Access versions 1 Release 16 through 1 Release 19

Description A Reflected Cross-site Scripting (XSS) issue exists in ENOVIAvpm Web Access. This allows an attacker to execute arbitrary script code within a user's browser session.

Recommendations Update ENOVIAvpm Web Access to a version later than 1 Release 19.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-2101

Affected Products

Enoviavpm Web Access

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-2101 · Security Note
• https://3ds.com/trust-center/security/security-advisories/cve-2026-2101 · Note
• https://twitter.com/TheHackerWire/status/2023526095539368217 · Twitter Post
• https://twitter.com/cracbot/status/2025163664316420514 · Twitter Post
• https://t.me/cveNotify/152123 · Telegram Post
• https://t.me/CVEtracker/44848 · Telegram Post