Skip to content
OpenAdvisories

Vendor

Dassault Systèmes

113 known vulnerabilities.

Products

ENOVIA Collaborative Industry Innovator 20 SOLIDWORKS eDrawings 16 3DSwymer 15 DELMIA Apriso 10 Tuleap Enterprise Edition 9 SOLIDWORKS Desktop 4 eDrawings 4 Teamwork Cloud - Standard Edition 3 Teamwork Cloud - Business Edition 3 Teamwork Cloud - Business Pro Edition 3 Teamwork Cloud - Enterprise Edition 3 Product Manager 3 ENOVIA Live Collaboration 2 Station Launcher App in 3DEXPERIENCE platform 2 DELMIA Service Process Engineer 2 Project Portfolio Manager 2 DELMIA Factory Resource Manager 2 Collaborative Industry Innovator 2 City Referential Manager 2 SIMULIA 3DOrchestrate 1 3DEXPERIENCE 1 Magic Collaboration Studio 1 SOLIDWORKS Visualize 1 ENOVIAvpm Web Access 1 ENOVIA Product Manager 1 Multidisciplinary Optimization Engineer 1 Documentation server 1 ENOVIA Specification Manager 1 GEOVIA Geospatial Data Manager 1 ENOVIA Change Manager 1 ENOVIA Product Engineering Specialist 1 SIMULIA Execution Engine 1 BIOVIA Workbook 1 Service Process Engineer 1 BIOVIA Materials Studio products 1
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Medium 5.4
    CVE-2023-5597

    Stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x

    A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code.

    Dassault Systèmes 3DSwymer
  • Medium 4.4
    CVE-2024-0935

    Insertion of Sensitive Information into Log File vulnerabilities affecting DELMIA Apriso Release 2019 through Release 2024

    Insertion of Sensitive Information into Log File vulnerabilities are affecting DELMIA Apriso Release 2019 through Release 2024

    Dassault Systèmes DELMIA Apriso
  • Medium 5.4
    CVE-2023-5598

    Stored Cross-site Scripting (XSS) vulnerabilities affecting 3DSwym in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2023x

    Stored Cross-site Scripting (XSS) vulnerabilities affecting 3DSwym in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2023x allow an attacker to execute arbitrary script code.

    Dassault Systèmes 3DSwymer
  • Medium 5.4
    CVE-2023-5599

    Stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2023x

    A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2023x allows an attacker to execute arbitrary script code.

    Dassault Systèmes 3DSwymer
  • Medium 6.8
    CVE-2023-3589

    Cross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x

    A Cross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x could allow with some very specific conditions an attacker to send a specifically crafted query to the server.

    Dassault Systèmes Teamwork Cloud - Standard Edition Teamwork Cloud - Business Pro Edition Teamwork Cloud - Business Edition
  • Medium 5.4
    CVE-2023-3588

    Stored Cross-site Scripting (XSS) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x

    A stored Cross-site Scripting (XSS) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x allows an attacker to execute arbitrary script code.

    Dassault Systèmes Teamwork Cloud - Enterprise Edition Teamwork Cloud - Standard Edition Teamwork Cloud - Business Pro Edition
  • Medium 6.1
    CVE-2023-1996

    Reflected Cross-site Scripting (XSS) vulnerability affecting Release 3DEXPERIENCE R2018x through Release 3DEXPERIENCE R2023x

    A reflected Cross-site Scripting (XSS) vulnerability in Release 3DEXPERIENCE R2018x through Release 3DEXPERIENCE R2023x allows an attacker to execute arbitrary script code.

    Dassault Systèmes 3DEXPERIENCE
  • Medium 5.4
    CVE-2023-2139

    Reflected Cross-site Scripting vulnerability affecting DELMIA Apriso Release 2017 through Release 2022

    A reflected Cross-site Scripting (XSS) Vulnerability in DELMIA Apriso Release 2017 through Release 2022 allows an attacker to execute arbitrary script code.

    Dassault Systèmes DELMIA Apriso
  • Medium 6.8
    CVE-2023-1288

    ENOVIA Live Collaboration V6R2013xE is affected by an XML External Entity injection (XXE) vulnerability

    An XML External Entity injection (XXE) vulnerability in ENOVIA Live Collaboration V6R2013xE allows an attacker to read local files on the server.

    Dassault Systèmes ENOVIA Live Collaboration