Threats Tagged 'cve-2025-10555'

CVE-2025-10555 is a high-severity stored Cross-site Scripting (XSS) vulnerability in Dassault Systèmes DELMIA Service Process Engineer, specifically in the Service Items Management component of Release 3DEXPERIENCE R2025x Golden. This vulnerability allows an attacker with limited privileges and requiring user interaction to inject malicious scripts that execute in the context of other users' browsers, potentially leading to theft of sensitive information and session hijacking. Although no known exploits are currently reported in the wild, the vulnerability's high CVSS score (8.7) indicates significant risk. European organizations using this software, especially in manufacturing and industrial sectors, could face confidentiality and integrity breaches. Mitigation involves applying vendor patches once available, implementing strict input validation and output encoding, and restricting user privileges. Countries with strong manufacturing bases and Dassault Systèmes customer presence, such as France, Germany, Italy, and the UK, are most likely to be affected. Defenders should prioritize monitoring for suspicious script injections and educate users about phishing attempts leveraging this vulnerability.

HighVulnerabilityFranceGermanyItaly+5#cve#cve-2025-10555#cwe-79