Threat database

60 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	8.0	KEVEPSS 79%	CVE-2025-6204DELMIA Apriso · Code Injection High8.0KEVEPSS 79%2025-08-04CVE Database V5CVE-2025-6204 An Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to execute arbitrary code. KEVEPSS 79%Vulnerability Dassault Systèmes #cwe-94 United States+9	CVE Database V5	2025-08-04
High	7.8	EPSS 0.2%	CVE-2025-7042SOLIDWORKS eDrawings · Use After Free High7.8EPSS 0.2%2025-07-15CVE Database V5CVE-2025-7042 Use After Free vulnerability exists in the IPT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted IPT file. EPSS 0.2%Vulnerability Dassault Systèmes #cwe-416 Germany+9	CVE Database V5	2025-07-15
High	7.8	EPSS 0.2%	CVE-2025-6974SOLIDWORKS eDrawings · Use of Uninitialized Variable High7.8EPSS 0.2%2025-07-15CVE Database V5CVE-2025-6974 Use of Uninitialized Variable vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted JT file. EPSS 0.2%Vulnerability Dassault Systèmes #cwe-457 Germany+9	CVE Database V5	2025-07-15
High	7.8	EPSS 0.2%	CVE-2025-6973SOLIDWORKS eDrawings · Use After Free High7.8EPSS 0.2%2025-07-15CVE Database V5CVE-2025-6973 Use After Free vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted JT file. EPSS 0.2%Vulnerability Dassault Systèmes #cwe-416 Germany+9	CVE Database V5	2025-07-15
High	7.8	EPSS 0.2%	CVE-2025-6972SOLIDWORKS eDrawings · Use After Free High7.8EPSS 0.2%2025-07-15CVE Database V5CVE-2025-6972 Use After Free vulnerability exists in the CATPRODUCT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted CATPRODUCT file. EPSS 0.2%Vulnerability Dassault Systèmes #cwe-416 Germany+9	CVE Database V5	2025-07-15
High	7.8	EPSS 0.2%	CVE-2025-6971SOLIDWORKS eDrawings · Use After Free High7.8EPSS 0.2%2025-07-15CVE Database V5CVE-2025-6971 Use After Free vulnerability exists in the CATPRODUCT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted CATPRODUCT file. EPSS 0.2%Vulnerability Dassault Systèmes #cwe-416 Germany+6	CVE Database V5	2025-07-15
High	7.8	EPSS 0.2%	CVE-2025-0831SOLIDWORKS eDrawings · Out-of-bounds Read High7.8EPSS 0.2%2025-07-15CVE Database V5CVE-2025-0831 Out-Of-Bounds Read vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted JT file. EPSS 0.2%Vulnerability Dassault Systèmes #cwe-125 Germany+9	CVE Database V5	2025-07-15
High	8.7	EPSS 0.4%	CVE-2025-4987Project Portfolio Manager · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') High8.7EPSS 0.4%2025-06-16CVE Database V5CVE-2025-4987 A stored Cross-site Scripting (XSS) vulnerability affecting Opportunity Management in Project Portfolio Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. EPSS 0.4%Vulnerability Dassault Systèmes #cwe-79 France+8	CVE Database V5	2025-06-16
Critical	9.0	KEVEPSS 96%	CVE-2025-5086DELMIA Apriso · Deserialization of Untrusted Data Critical9.0KEVEPSS 96%2025-06-02CVE Database V5CVE-2025-5086 A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could lead to a remote code execution. KEVEPSS 96%Vulnerability Dassault Systèmes #cwe-502 United States+13	CVE Database V5	2025-06-02
High	8.7	EPSS 0.3%	CVE-2025-0602Collaborative Industry Innovator · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') High8.7EPSS 0.3%2025-05-30CVE Database V5CVE-2025-0602 A stored Cross-site Scripting (XSS) vulnerability affecting Compare in Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. EPSS 0.3%Vulnerability Dassault Systèmes #cwe-79 Germany+9	CVE Database V5	2025-05-30
High	8.7	EPSS 0.3%	CVE-2025-4983City Referential Manager · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') High8.7EPSS 0.3%2025-05-30CVE Database V5CVE-2025-4983 A stored Cross-site Scripting (XSS) vulnerability affecting City Referential in City Referential Manager on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. EPSS 0.3%Vulnerability Dassault Systèmes #cwe-79 France+7	CVE Database V5	2025-05-30
High	8.7	EPSS 0.3%	CVE-2025-4984City Referential Manager · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') High8.7EPSS 0.3%2025-05-30CVE Database V5CVE-2025-4984 A stored Cross-site Scripting (XSS) vulnerability affecting City Discover in City Referential Manager on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. EPSS 0.3%Vulnerability Dassault Systèmes #cwe-79 France+7	CVE Database V5	2025-05-30
High	8.7	EPSS 0.3%	CVE-2025-4985Project Portfolio Manager · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') High8.7EPSS 0.3%2025-05-30CVE Database V5CVE-2025-4985 A stored Cross-site Scripting (XSS) vulnerability affecting Risk Management in Project Portfolio Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. EPSS 0.3%Vulnerability Dassault Systèmes #cwe-79 France+7	CVE Database V5	2025-05-30
High	8.7	EPSS 0.3%	CVE-2025-4986Product Manager · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') High8.7EPSS 0.3%2025-05-30CVE Database V5CVE-2025-4986 A stored Cross-site Scripting (XSS) vulnerability affecting Model Definition in Product Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. EPSS 0.3%Vulnerability Dassault Systèmes #cwe-79 Germany+9	CVE Database V5	2025-05-30
High	8.7	EPSS 0.3%	CVE-2025-4988Multidisciplinary Optimization Engineer · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') High8.7EPSS 0.3%2025-05-30CVE Database V5CVE-2025-4988 A stored Cross-site Scripting (XSS) vulnerability affecting Results Analytics in Multidisciplinary Optimization Engineer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session. EPSS 0.3%Vulnerability Dassault Systèmes #cwe-79 France+8	CVE Database V5	2025-05-30
High	8.7	EPSS 0.3%	CVE-2025-4989Product Manager · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') High8.7EPSS 0.3%2025-05-30CVE Database V5CVE-2025-4989 A stored Cross-site Scripting (XSS) vulnerability affecting Requirements in Product Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. EPSS 0.3%Vulnerability Dassault Systèmes #cwe-79 Germany+9	CVE Database V5	2025-05-30
High	8.7	EPSS 0.3%	CVE-2025-4990Product Manager · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') High8.7EPSS 0.3%2025-05-30CVE Database V5CVE-2025-4990 A stored Cross-site Scripting (XSS) vulnerability affecting Change Governance in Product Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. EPSS 0.3%Vulnerability Dassault Systèmes #cwe-79 France+7	CVE Database V5	2025-05-30
High	8.7	EPSS 0.3%	CVE-2025-4991Collaborative Industry Innovator · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') High8.7EPSS 0.3%2025-05-30CVE Database V5CVE-2025-4991 A stored Cross-site Scripting (XSS) vulnerability affecting 3D Markup in Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. EPSS 0.3%Vulnerability Dassault Systèmes #cwe-79 France+6	CVE Database V5	2025-05-30
High	8.7	EPSS 0.3%	CVE-2025-4992Service Process Engineer · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') High8.7EPSS 0.3%2025-05-30CVE Database V5CVE-2025-4992 A stored Cross-site Scripting (XSS) vulnerability affecting Service Items Management in Service Process Engineer from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session. EPSS 0.3%Vulnerability Dassault Systèmes #cwe-79 Germany+7	CVE Database V5	2025-05-30
High	8.8	EPSS 1.6%	CVE-2023-6078BIOVIA Materials Studio products · OS Command Injection High8.8EPSS 1.6%2024-02-01CVE Database V5CVE-2023-6078 An OS Command Injection vulnerability exists in BIOVIA Materials Studio products from Release BIOVIA 2021 through Release BIOVIA 2023. Upload of a specially crafted perl script can lead to arbitrary command execution. EPSS 1.6%Vulnerability Dassault Systèmes #cwe-78 Germany+7	CVE Database V5	2024-02-01

Showing 41–60 of 60 results