CVE-2025-10553 - Vulnerability Analysis

Overview

DELMIA Factory Resource Manager Release 3DEXPERIENCE R2023x through R2025x contains a stored XSS caused by improper input sanitization in Factory Resource Management, letting attackers execute arbitrary script code in users' browsers, exploit requires user interaction.

Severity & Score

Impact

Attackers can execute arbitrary scripts in users' browsers, potentially stealing session data or performing actions on behalf of the user.

Mitigation

Update to the latest available version beyond Release 3DEXPERIENCE R2025x.

References

• https://www.3ds.com/trust-center/security/security-advisories/cve-2025-10553

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner