← CVE Intelligence

CVE-2026-2101

Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIAvpm Web Access from ENOVIAvpm Version 1 Release 16 through ENOVIAvpm Version 1 Release 19 PUBLISHED

Description (CNA)

A Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIAvpm Web Access from ENOVIAvpm Version 1 Release 16 through ENOVIAvpm Version 1 Release 19 allows an attacker to execute arbitrary script code in user's browser session.

Affected (CNA)

Vendor / productVersions
Dassault Systèmes / ENOVIAvpm Web Accessaffected ENOVIAvpm V1R16 Golden through ENOVIAvpm V1R16 SP6; affected ENOVIAvpm V1R17 Golden through ENOVIAvpm V1R17 SP5; affected ENOVIAvpm V1R18 Golden through ENOVIAvpm V1R18 SP3; affected ENOVIAvpm V1R19 Golden through ENOVIAvpm V1R19 SP1

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.