← Back

3ds

60 CVEs • 16 products

Products (16)

Click to collapse
Toggle
3dexperience Enovia
3dexperience_enovia
22 CVEs
3dexperience
11 CVEs
Delmia Apriso
delmia_apriso
7 CVEs
Solidworks Edrawings
solidworks_edrawings
3 CVEs
Catia
catia
2 CVEs
Enovia Live Collaboration
enovia_live_collaboration
2 CVEs
3dexperience Solidworks
3dexperience_solidworks
2 CVEs
Teamwork Cloud No Magic Release
teamwork_cloud_no_magic_release
2 CVEs
3dswymer
2 CVEs
Enovia Smarteam
enovia_smarteam
1 CVE
3d Xml Player
3d_xml_player
1 CVE
3dvia Composer
3dvia_composer
1 CVE
Push2rss 3ds
push2rss_3ds
1 CVE
Teamwork Cloud
teamwork_cloud
1 CVE
Biovia Materials Studio
biovia_materials_studio
1 CVE
Solidworks
solidworks
1 CVE

CVEs (60)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-0826
13ds
13dexperience Enovia
Oct 22, 2025
Mar 17, 2025
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A stored Cross-site Scripting (XSS) vulnerability affecting 3D Navigate in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitr...Show more
A stored Cross-site Scripting (XSS) vulnerability affecting 3D Navigate in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.Show less
CVE-2025-0601
13ds
13dexperience Enovia
Oct 22, 2025
Mar 17, 2025
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute a...Show more
A stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.Show less
CVE-2025-0600
13ds
13dexperience Enovia
Oct 22, 2025
Mar 17, 2025
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A stored Cross-site Scripting (XSS) vulnerability affecting Product Explorer in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser...Show more
A stored Cross-site Scripting (XSS) vulnerability affecting Product Explorer in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.Show less
CVE-2025-0599
13ds
13dexperience Enovia
Oct 22, 2025
Mar 17, 2025
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's brow...Show more
A stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.Show less
CVE-2025-0598
13ds
13dexperience Enovia
Oct 22, 2025
Mar 17, 2025
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A stored Cross-site Scripting (XSS) vulnerability affecting Relations in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrar...Show more
A stored Cross-site Scripting (XSS) vulnerability affecting Relations in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.Show less
CVE-2025-0596
13ds
13dexperience Enovia
Oct 22, 2025
Mar 17, 2025
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A stored Cross-site Scripting (XSS) vulnerability affecting Bookmark Editor in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser...Show more
A stored Cross-site Scripting (XSS) vulnerability affecting Bookmark Editor in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.Show less
CVE-2024-12092
13ds
13dexperience Enovia
Oct 22, 2025
Dec 16, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
CVE-2024-12091
13ds
13dexperience Enovia
Oct 22, 2025
Dec 16, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code...Show more
A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.Show less
CVE-2024-12090
13ds
13dexperience Enovia
Oct 22, 2025
Dec 16, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
CVE-2024-12089
13ds
13dexperience Enovia
Oct 22, 2025
Dec 16, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code...Show more
A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.Show less
CVE-2024-6380
13ds
13dexperience Enovia
Oct 22, 2025
Oct 16, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script c...Show more
A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.Show less
CVE-2024-7736
13ds
13dexperience Enovia
Oct 22, 2025
Sep 19, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script c...Show more
A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.Show less
CVE-2024-8004
13ds
13dexperience Enovia
Sep 4, 2024
Sep 2, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code...Show more
A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.Show less
CVE-2024-7939
13ds
13dexperience
Sep 13, 2024
Sep 2, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
CVE-2024-7938
13ds
13dexperience
Sep 4, 2024
Sep 2, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's brows...Show more
A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.Show less
CVE-2024-7932
13ds
13dexperience
Sep 13, 2024
Sep 2, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
CVE-2024-6379
13ds
13dexperience
Aug 27, 2024
Aug 20, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
A reflected Cross-site Scripting (XSS) vulnerability affecting 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
CVE-2024-6378
13ds
13dexperience
Aug 21, 2024
Aug 20, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script c...Show more
A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.Show less
CVE-2024-6377
13ds
13dexperience
Aug 27, 2024
Aug 20, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
An URL redirection to untrusted site (open redirect) vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to redirect users to an arbitrar...Show more
An URL redirection to untrusted site (open redirect) vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to redirect users to an arbitrary website via a crafted URL.Show less
CVE-2024-1847
13ds
1Solidworks
Mar 3, 2025
Feb 28, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Variable, Use-After-Free vulnerabilities exist in the file reading proced...Show more
Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Variable, Use-After-Free vulnerabilities exist in the file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially crafted CATPART, IPT, JT, SAT, STL, STP, X_B or X_T file. NOTE: CVE-2024-3298 and CVE-2024-3299 were SPLIT from this ID.Show less