← CVE Intelligence

CVE-2023-1996

Reflected Cross-site Scripting (XSS) vulnerability affecting Release 3DEXPERIENCE R2018x through Release 3DEXPERIENCE R2023x PUBLISHED

Description (CNA)

A reflected Cross-site Scripting (XSS) vulnerability in Release 3DEXPERIENCE R2018x through Release 3DEXPERIENCE R2023x allows an attacker to execute arbitrary script code.

Affected (CNA)

Vendor / productVersions
Dassault Systèmes / 3DEXPERIENCEaffected Release 3DEXPERIENCE R2018x - All levels; affected Release 3DEXPERIENCE R2019x - All levels; affected Release 3DEXPERIENCE R2020x Golden through Release 3DEXPERIENCE R2020x.FP.CFA.2303; affected Release 3DEXPERIENCE R2021x Golden through Release 3DEXPERIENCE R2021x.FP.CFA.2306; affected Release 3DEXPERIENCE R2022x Golden through Release 3DEXPERIENCE R2022x FP.CFA.2250; affected Release 3DEXPERIENCE R2023x Golden through Release 3DEXPERIENCE R2023x.FP.CFA.2306

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.