Skip to content
OpenAdvisories
High · 8.7 CVE-2026-2101 EUVD-2026-7826GHSA-pmh8-3qx8-2rqv

Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIAvpm Web Access from ENOVIAvpm Version 1 Release 16 through ENOVIAvpm Version 1 Release 19

Published Feb 16, 2026 · Updated Feb 17, 2026 · Assigned by 3DS

Vendor: Dassault Systèmes Product: ENOVIAvpm Web Access

Description

A Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIAvpm Web Access from ENOVIAvpm Version 1 Release 16 through ENOVIAvpm Version 1 Release 19 allows an attacker to execute arbitrary script code in user's browser session.

Affected products

VendorProductAffectedFixed
Dassault Systèmes ENOVIAvpm Web Access ENOVIAvpm V1R16 Golden – ≤ ENOVIAvpm V1R16 SP6, ENOVIAvpm V1R17 Golden – ≤ ENOVIAvpm V1R17 SP5, ENOVIAvpm V1R18 Golden – ≤ ENOVIAvpm V1R18 SP3, ENOVIAvpm V1R19 Golden – ≤ ENOVIAvpm V1R19 SP1 —

References