Dassault Systèmes Security Advisories

Providing information on important security vulnerabilities that have been confirmed in our products.

Security advisories are based on published vulnerabilities coordinated with MITRE in accordance with MITRE CNA (CVE Numbering Authorities) policies and guidelines. Additional information on each advisory can be found in our Support Knowledge Base (KB) accessible in the dedicated CVE pages.

There are 108 results
CVE-2025-4989

Stored Cross-site Scripting (XSS) vulnerability affecting Requirements in Product Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x

Security Advisories

CVE-2025-4990

Stored Cross-site Scripting (XSS) vulnerability affecting Change Governance in Product Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x

Security Advisories

CVE-2025-4991

Stored Cross-site Scripting (XSS) vulnerability affecting 3D Markup in Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x

Security Advisories

CVE-2025-4992

Stored Cross-site Scripting (XSS) vulnerability affecting Service Items Management in Service Process Engineer from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2025x

Security Advisories

CVE-2025-5086

Deserialization of Untrusted Data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025

Security Advisories

CVE-2025-1884

Use-After-Free vulnerability exists in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025

Security Advisories

CVE-2025-4983

Stored Cross-site Scripting (XSS) vulnerability affecting City Referential in City Referential Manager on Release 3DEXPERIENCE R2025x

Security Advisories

CVE-2025-0602

Stored Cross-site Scripting (XSS) vulnerability affecting Compare in Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x

Security Advisories

CVE-2025-4985

Stored Cross-site Scripting (XSS) vulnerability affecting Risk Management in Project Portfolio Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x

Security Advisories

CVE-2025-4986

Stored Cross-site Scripting (XSS) vulnerability affecting Model Definition in Product Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x

Security Advisories

CVE-2023-1287

ENOVIA Live Collaboration V6R2013xE is affected by an XSL template injection vulnerability.

Security Advisories

CVE-2023-1288

ENOVIA Live Collaboration V6R2013xE is affected by an XML External Entity injection (XXE) vulnerability.

Security Advisories