CVE-2025-10551 - Vulnerability Analysis

Overview

ENOVIA Collaborative Industry Innovator Release 3DEXPERIENCE R2023x through R2025x contains a stored XSS caused by improper sanitization in Document Management, letting attackers execute arbitrary script code in user browsers, exploit requires user interaction.

Severity & Score

Impact

Attackers can execute arbitrary scripts in user browsers, potentially stealing session data or performing actions on behalf of users.

Mitigation

Update to the latest version beyond 3DEXPERIENCE R2025x.

References

• https://www.3ds.com/trust-center/security/security-advisories/cve-2025-10551

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner