Description
A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
Published: 2024-09-19
Score: 8.7 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2024-48613 A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
History

Wed, 22 Oct 2025 16:30:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:3ds:3dexperience_enovia:*:*:*:*:*:*:*:*

Wed, 16 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.00083}

 epss

{'score': 0.00097}

Thu, 19 Sep 2024 18:30:00 +0000

Type Values Removed Values Added
First Time appeared 3ds
3ds 3dexperience Enovia
CPEs cpe:2.3:a:3ds:3dexperience_enovia:r2022x:*:*:*:*:*:*:*
cpe:2.3:a:3ds:3dexperience_enovia:r2023x:*:*:*:*:*:*:*
cpe:2.3:a:3ds:3dexperience_enovia:r2024x:*:*:*:*:*:*:*
Vendors & Products 3ds
3ds 3dexperience Enovia
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 19 Sep 2024 15:30:00 +0000

Type Values Removed Values Added
Description A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
Title Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x
Weaknesses CWE-79
References
Metrics cvssV3_1

{'score': 8.7, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N'}

Subscriptions

3ds 3dexperience Enovia
cve-icon MITRE

Status: PUBLISHED

Assigner: 3DS

Published:

Updated: 2024-09-19T18:09:00.818Z

Reserved: 2024-08-13T13:56:10.799Z

Link: CVE-2024-7736

cve-icon Vulnrichment

Updated: 2024-09-19T18:08:52.763Z

cve-icon NVD

Status : Analyzed

Published: 2024-09-19T16:15:05.520

Modified: 2025-10-22T16:20:56.353

Link: CVE-2024-7736

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses