CVE-2024-12092 — Stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator on Release 3DEXPERI…

CVE-2024-12092

Stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x PUBLISHED

Description (CNA)

A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.

Affected (CNA)

Vendor / product	Versions
Dassault Systèmes / ENOVIA Collaborative Industry Innovator	affected Release 3DEXPERIENCE R2024x Golden through Release 3DEXPERIENCE R2024x.FP.CFA.2414

CWE

CWE-79

References

https://www.3ds.com/vulnerability/advisories

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.