CVE-2025-10552 — Stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2025x

CVE-2025-10552

Stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2025x PUBLISHED

Description (CNA)

A stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.

Affected (CNA)

Vendor / product	Versions
Dassault Systèmes / 3DSwymer	affected Release 3DEXPERIENCE R2025x Golden through Release 3DEXPERIENCE R2025x FP.CFA.2514

CWE

CWE-79

References

https://www.3ds.com/trust-center/security/security-advisories/cve-2025-10552

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.