Description Summary:
An improper authentication vulnerability in Dassault Systèmes DELMIA Apriso (2020-2026) allows remote, unauthenticated attackers to gain privileged access to the server.

Executive Summary:
An improper authentication flaw in Dassault Systèmes DELMIA Apriso allows unauthenticated remote attackers to obtain unauthorized administrative access to the platform.

Vulnerability Details

CVE-ID: CVE-2026-9695

Affected Software: Dassault Systèmes DELMIA Apriso

Affected Versions: Release 2020 Golden through 2026 SP1 (see specific service pack ranges in metadata)

Vulnerability: This is an Improper Authentication (CWE-287) vulnerability. It allows an unauthenticated remote attacker to bypass security controls and gain privileged access to the application server.

Business Impact

With a CVSS score of 9.8, this vulnerability poses an extreme risk to business operations. An attacker gaining privileged access can manipulate production workflows, steal sensitive manufacturing data, or disrupt critical industrial processes, leading to severe financial and operational consequences.

Remediation Plan

Immediate Action: Apply the vendor-supplied patches immediately by updating to the latest service pack for your specific DELMIA Apriso release.

Proactive Monitoring: Review application access logs for anomalous login patterns, especially those originating from unexpected IP addresses or occurring outside of business hours.

Compensating Controls: Deploy a Web Application Firewall (WAF) with strict access control lists to block traffic to unauthorized administrative endpoints until the patch can be applied.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of Jul 8, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability is highly critical and presents a significant risk of full system takeover. Organizations utilizing DELMIA Apriso must prioritize these updates immediately to prevent unauthorized access to their production environments.

Description Summary:
A stored Cross-Site Scripting (XSS) vulnerability in Process Experience Studio within DELMIA Service Process Engineer allows authenticated, low-privilege users to execute arbitrary scripts in other users' sessions.

Executive Summary:
A stored XSS vulnerability in DELMIA Service Process Engineer allows low-privileged users to execute malicious scripts, potentially leading to unauthorized session access.

Vulnerability Details

CVE-ID: CVE-2026-9024

Affected Software: Process Experience Studio in DELMIA Service Process Engineer

Affected Versions: Release 3DEXPERIENCE R2024x through R2026x

Vulnerability: This is a stored Cross-Site Scripting (XSS) vulnerability within the Process Experience Studio component. An authenticated user with low-level privileges can inject malicious scripts, which are then stored and executed in the browser sessions of other, potentially higher-privileged, users.

Business Impact

With a CVSS score of 8.7, this vulnerability poses a significant risk to the confidentiality and integrity of user sessions. Successful exploitation could lead to session hijacking, unauthorized data access, or the performance of actions on behalf of the victim user, potentially compromising sensitive design and process data.

Remediation Plan

Immediate Action: Apply the security updates provided by Dassault Systèmes as detailed in their official security advisory.

Proactive Monitoring: Monitor application logs for suspicious script injections and review user activity for potential session hijacking attempts.

Compensating Controls: Ensure that appropriate Content Security Policy (CSP) headers are implemented to restrict the execution of unauthorized scripts within the browser.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of June 2, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Organizations deploying DELMIA Service Process Engineer should prioritize applying the vendor-provided updates. Additionally, administrators should educate users on the risks of interacting with untrusted content and enforce strict access controls to limit the impact of potential XSS attacks.

Description Summary:
A deserialization vulnerability in Teamwork Cloud and Magic Collaboration Studio allows unauthenticated remote code execution.

Executive Summary:
An unauthenticated remote code execution vulnerability in Teamwork Cloud and Magic Collaboration Studio threatens the integrity and security of collaborative modeling environments.

Vulnerability Details

CVE-ID: CVE-2026-7858

Affected Software: Dassault Systèmes Teamwork Cloud and Magic Collaboration Studio

Affected Versions: Teamwork Cloud 2022x through 2026x; Magic Collaboration Studio 2022x through 2026x

Vulnerability: This vulnerability involves the deserialization of untrusted data, which can be triggered by an unauthenticated attacker to execute arbitrary code remotely on the affected server.

Business Impact

Successful exploitation allows an attacker to gain full control over the server, leading to intellectual property theft or the disruption of critical engineering and design workflows. With a CVSS score of 9.8, this flaw represents a maximum-severity risk to organizations relying on these tools for sensitive project data.

Remediation Plan

Immediate Action: Update Teamwork Cloud and Magic Collaboration Studio to the latest released versions that include the security fix.

Proactive Monitoring: Review system and application logs for unusual inbound network connections or unexpected child processes spawned by the application service.

Compensating Controls: Restrict network access to the application management interface to trusted internal segments only and employ WAF filtering for serialized object streams.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Jun 1, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The vulnerability allows for unauthenticated remote code execution, which is one of the most severe threat vectors. It is imperative that organizations running the affected software versions perform an immediate update to eliminate the risk of total system compromise.

Description Summary:
A code injection vulnerability in Dassault Systèmes SOLIDWORKS Desktop allows local attackers to execute arbitrary code by enticing a user to open a specially crafted file.

Executive Summary:
Dassault Systèmes SOLIDWORKS Desktop is vulnerable to a code injection flaw that enables arbitrary code execution when a victim opens a malicious file, posing a significant risk to local system integrity.

Vulnerability Details

CVE-ID: CVE-2026-3476

Affected Software: Dassault Systèmes SOLIDWORKS Desktop

Affected Versions: Release 2025 SP0 through Release 2025 SP5, Release 2026 SP0

Vulnerability: This is a code injection vulnerability (CWE-94) that occurs when the application improperly processes input from a crafted file. The attack vector is local, requiring user interaction to trigger the execution, and the attacker does not require prior authentication.

Business Impact

A successful exploitation of this vulnerability allows an attacker to execute arbitrary code with the privileges of the logged-in user. Given the CVSS score of 7.8, this represents a high-severity risk that could lead to full system compromise, data theft, or the installation of persistent malware within the corporate environment.

Remediation Plan

Immediate Action: Update all instances of SOLIDWORKS Desktop to the latest patched version provided by Dassault Systèmes as detailed in their security advisory.

Proactive Monitoring: Monitor endpoint systems for suspicious child processes spawned by SOLIDWORKS, such as command shells or unauthorized scripts, and review system logs for unusual file access patterns.

Compensating Controls: Ensure that users are educated on the risks of opening files from untrusted sources and utilize endpoint security solutions that can detect and block malicious code execution at the process level.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of March 18, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While the flaw is not currently exploited in the wild, the capability for arbitrary code execution makes it a high-value target for adversaries seeking initial access through social engineering.

Analyst Recommendation

This vulnerability presents a clear risk to workstation security and must be addressed with urgency. Administrators should prioritize the deployment of the vendor-provided patches across all affected SOLIDWORKS installations to eliminate the risk of arbitrary code execution stemming from the processing of untrusted files.

Description Summary:
A Reflected Cross-Site Scripting (XSS) vulnerability in ENOVIAvpm Web Access allows attackers to execute arbitrary scripts in a user's browser session.

Executive Summary:
Users of ENOVIAvpm are vulnerable to session hijacking and unauthorized actions due to a high-severity reflected XSS flaw in the Web Access component.

Vulnerability Details

CVE-ID: CVE-2026-2101

Affected Software: Dassault Systèmes ENOVIAvpm

Affected Versions: Version 1 Release 16 through Version 1 Release 19

Vulnerability: This reflected XSS vulnerability exists in the ENOVIAvpm Web Access interface. An attacker can craft a malicious URL that, when clicked by a victim, executes arbitrary JavaScript in the context of the victim's browser session, bypassing same-origin policies.

Business Impact

Successful exploitation can lead to the theft of session tokens, allowing an attacker to impersonate legitimate users and access sensitive engineering or product lifecycle data. With a CVSS score of 8.7, this vulnerability poses a significant risk to intellectual property and organizational data integrity.

Remediation Plan

Immediate Action: Apply the security updates provided by Dassault Systèmes for ENOVIAvpm Web Access immediately.

Proactive Monitoring: Monitor web logs for suspicious URL parameters containing script tags or encoded characters typically used in XSS attacks.

Compensating Controls: Educate users on the risks of clicking untrusted links and deploy a Web Application Firewall (WAF) to detect and block reflected XSS patterns.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of February 17, 2026, no active exploitation has been reported. However, high-value PLM systems like ENOVIAvpm are often targets for industrial espionage.

Analyst Recommendation

The 8.7 CVSS score indicates a critical need for patching. Given the sensitive nature of the data stored in ENOVIAvpm, administrators must ensure that all Web Access components are updated to the latest secure release to prevent the compromise of user sessions.

Description Summary:
Tuleap Enterprise Edition is vulnerable to a use of default password flaw, which may allow unauthorized users to gain administrative access to the platform.

Executive Summary:
A high severity use of default password vulnerability in Tuleap Enterprise Edition could allow unauthorized actors to gain administrative access to the system.

Vulnerability Details

CVE-ID: CVE-2026-19851

Affected Software: Dassault Systèmes Tuleap Enterprise Edition

Affected Versions: Dassault Systèmes Tuleap Enterprise Edition: 17.0-1 through 17.0-36, 17.5-1 through 17.5-24

Vulnerability: The application is susceptible to a use of default password (CWE-1393) vulnerability. This flaw allows an unauthenticated attacker to potentially gain access to the system if the default credentials have not been changed.

Business Impact

The presence of default credentials provides an easy path for unauthorized access, which can lead to complete compromise of the Tuleap instance. Given the CVSS score of 7.7, this risk is substantial, as it could lead to the theft of intellectual property, project management data, or other sensitive information hosted on the platform.

Remediation Plan

Immediate Action: Change all default passwords immediately and ensure that all administrative accounts are secured with unique, strong credentials.

Proactive Monitoring: Review system access logs for suspicious login attempts or unauthorized modifications originating from administrative accounts.

Compensating Controls: Implement network-level access controls to restrict exposure of the Tuleap interface to trusted internal networks only.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of August 25, 2026, there is no public information indicating active exploitation or a public proof of concept for this vulnerability. The vulnerability is highly exploitable if the default credentials remain in place, making it a critical configuration risk.

Analyst Recommendation

Security teams must prioritize the remediation of default account configurations immediately. All instances of Tuleap Enterprise Edition within the affected version range should be audited to ensure that no default passwords remain in use.

Description Summary:
A deserialization of untrusted data vulnerability in the SIMULIA Execution Engine allows unauthenticated remote code execution.

Executive Summary:
Dassault Systèmes SIMULIA Execution Engine is vulnerable to unauthenticated remote code execution due to improper deserialization, posing a critical risk to system integrity.

Vulnerability Details

CVE-ID: CVE-2026-17061

Affected Software: Dassault Systèmes SIMULIA Execution Engine

Affected Versions: Release 2023 Golden, Release 2024 Golden through Release 2024 FP.CFA.2615, Release 2025 Golden through Release 2025 FP.CFA.2628, Release 2026 Golden through Release 2026 FP.CFA.2624

Vulnerability: This is a deserialization of untrusted data flaw (CWE-502) that permits an unauthenticated remote attacker to execute arbitrary code with the privileges of the application.

Business Impact

Successful exploitation allows a remote attacker to gain full control over the affected server, leading to potential data exfiltration, lateral movement, or complete system compromise. With a CVSS score of 10.0, this vulnerability represents the highest level of severity and requires immediate remediation to prevent catastrophic failure or unauthorized access to sensitive simulation data.

Remediation Plan

Immediate Action: Update the SIMULIA Execution Engine to the latest patched release as provided in the vendor security advisory.

Proactive Monitoring: Review system access logs for anomalous network connections or unexpected process executions originating from the execution engine service.

Compensating Controls: Implement strict network segmentation and firewall rules to restrict access to the engine to trusted management workstations only.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of Aug 11, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's nature as an unauthenticated deserialization vulnerability makes it highly susceptible to weaponization.

Analyst Recommendation

Given the critical nature of this vulnerability and the potential for total system compromise, administrators must prioritize patching the SIMULIA Execution Engine immediately. Ensure that the update is applied across all affected environments to mitigate the risk of remote exploitation.

Description Summary:
Tuleap Enterprise Edition is vulnerable to an authorization bypass allowing unauthenticated attackers to access sensitive information via user-controlled keys.

Executive Summary:
A critical authorization bypass vulnerability in Tuleap Enterprise Edition allows unauthenticated attackers to potentially access unauthorized data.

Vulnerability Details

CVE-ID: CVE-2026-14165

Affected Software: Dassault Systèmes Tuleap Enterprise Edition

Affected Versions: 17.0-1 through 17.0-31, 17.5-1 through 17.5-17

Vulnerability: This is an Authorization Bypass Through User-Controlled Key (CWE-639) vulnerability. The flaw exists in the application's access control logic, allowing an unauthenticated remote attacker to bypass security checks and gain unauthorized access to sensitive information.

Business Impact

Successful exploitation of this vulnerability could lead to significant data exposure, as the attacker does not require prior authentication to target the system. With a CVSS score of 7.5, this high-severity flaw represents a substantial risk to data confidentiality and regulatory compliance. Organizations relying on Tuleap for internal development or sensitive project management must treat this as a priority to prevent information leakage.

Remediation Plan

Immediate Action: Review the official security advisory from Dassault Systèmes and apply the necessary patches or security updates as soon as they are made available.

Proactive Monitoring: Review web server and application access logs for unusual patterns or access requests targeting unconventional user keys or endpoints.

Compensating Controls: Implement strict network access controls and ensure the Tuleap instance is not exposed to the public internet unless absolutely necessary.

Exploitation Status

Public Exploit Available: No (Exploit_available: false)

Analyst Notes: As of July 13, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The lack of authentication requirements makes this an attractive target, necessitating prompt remediation.

Analyst Recommendation

Given the high-severity nature of this authorization bypass, it is imperative that administrators identify their current Tuleap version immediately. If the instance falls within the affected ranges, prioritize the application of vendor-provided security patches to close this access gap and protect sensitive project data.

Description Summary:
An Out-Of-Bounds Write vulnerability in the EPRT file reading procedure of SOLIDWORKS eDrawings allows for arbitrary code execution via crafted files.

Executive Summary:
SOLIDWORKS eDrawings is susceptible to an Out-Of-Bounds Write vulnerability that enables remote code execution, posing a high risk to workstations handling CAD data.

Vulnerability Details

CVE-ID: CVE-2026-1335

Affected Software: SOLIDWORKS eDrawings

Affected Versions: Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026

Vulnerability: This vulnerability involves an Out-Of-Bounds Write during the processing of EPRT files. An unauthenticated attacker can leverage this flaw by providing a specially crafted file that, when opened, writes malicious data outside of intended memory boundaries.

Business Impact

Exploitation of this flaw can lead to complete loss of system integrity and the execution of unauthorized commands with user-level permissions. The high CVSS score of 7.8 is justified by the ease with which a malicious file can be distributed via phishing or social engineering to compromise high-value engineering targets.

Remediation Plan

Immediate Action: Deploy the official vendor security patches for SOLIDWORKS Desktop 2025 and 2026 immediately to remediate the vulnerable file-reading function.

Proactive Monitoring: Use endpoint security tools to alert on memory corruption events or unexpected network connections originating from the eDrawings application.

Compensating Controls: Utilize a Web Gateway or Email Security Appliance to scan and block EPRT files containing suspicious structures or those originating from unverified external sources.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of February 17, 2026, there is no public information indicating active exploitation of this vulnerability. The technical nature of an Out-Of-Bounds Write makes it a highly reliable vector for developing stable exploits.

Analyst Recommendation

Immediate remediation is required to protect against potential code execution attacks. Organizations must ensure that all instances of eDrawings are updated to the latest version. Delaying these updates leaves the environment vulnerable to targeted attacks aimed at compromising industrial designs.

Description Summary:
An Out-Of-Bounds Read vulnerability in SOLIDWORKS eDrawings can lead to arbitrary code execution when processing a maliciously crafted EPRT file.

Executive Summary:
A critical memory safety flaw in SOLIDWORKS eDrawings allows attackers to execute arbitrary code on a user's system through the delivery of a compromised EPRT file.

Vulnerability Details

CVE-ID: CVE-2026-1334

Affected Software: SOLIDWORKS eDrawings

Affected Versions: Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026

Vulnerability: The application suffers from an Out-Of-Bounds Read vulnerability within the EPRT file reading procedure. An unauthenticated attacker can exploit this by crafting a file that forces the application to read beyond allocated memory buffers during file parsing.

Business Impact

The impact of this vulnerability includes the potential for full system takeover and unauthorized access to sensitive engineering data. Given the CVSS score of 7.8, this represents a significant risk to organizational confidentiality and integrity, as a single user interaction can trigger the exploit.

Remediation Plan

Immediate Action: Update SOLIDWORKS eDrawings to the latest patched version available for the 2025 and 2026 releases to address the memory parsing issue.

Proactive Monitoring: Review system logs for application crashes involving eDrawings, which may indicate failed or successful exploitation attempts.

Compensating Controls: Implement "Least Privilege" principles for users of CAD software and use sandboxing technologies to isolate file-viewing activities from the rest of the network.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of February 17, 2026, there is no public information indicating active exploitation of this vulnerability. However, memory corruption vulnerabilities in file parsers are common targets for sophisticated threat actors seeking to steal industrial secrets.

Analyst Recommendation

This vulnerability highlights the risk inherent in processing complex file formats. It is imperative that administrators deploy the vendor-supplied security updates immediately. Furthermore, user awareness training regarding the dangers of opening unsolicited files from external vendors should be reinforced.

Description Summary:
A Use of Uninitialized Variable vulnerability in SOLIDWORKS eDrawings allows arbitrary code execution when a user opens a specially crafted EPRT file.

Executive Summary:
SOLIDWORKS eDrawings is vulnerable to a high-severity flaw that allows remote attackers to execute arbitrary code via malicious EPRT files, potentially compromising the host workstation.

Vulnerability Details

CVE-ID: CVE-2026-1333

Affected Software: SOLIDWORKS eDrawings

Affected Versions: Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026

Vulnerability: This is a Use of Uninitialized Variable vulnerability triggered during the EPRT file reading procedure. An unauthenticated attacker can exploit this by inducing a user to open a specially crafted file, leading to memory corruption and code execution.

Business Impact

A successful exploit allows an attacker to gain the same privileges as the user running the eDrawings application. This could lead to the theft of sensitive intellectual property, such as proprietary CAD designs, or serve as an entry point for lateral movement within the corporate network. The CVSS score of 7.8 reflects a high severity due to the potential for complete system compromise.

Remediation Plan

Immediate Action: Apply the latest security updates provided by SOLIDWORKS for the 2025 and 2026 Desktop releases immediately to patch the file-handling logic.

Proactive Monitoring: Monitor endpoint detection and response (EDR) logs for unusual child processes spawning from the eDrawings executable (eDrawings.exe).

Compensating Controls: Restrict the opening of EPRT files from untrusted or external sources and implement email filtering to block suspicious CAD file attachments.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of February 17, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw and the ubiquity of SOLIDWORKS in engineering environments, the potential for targeted exploitation is high.

Analyst Recommendation

The risk posed by arbitrary code execution in a widely used design tool is significant. Organizations using SOLIDWORKS Desktop 2025 or 2026 must prioritize this update. Ensure all engineering workstations are patched to prevent a single malicious file from compromising sensitive design data and internal systems.

Description Summary:
A critical out of bounds write vulnerability in the SOLIDWORKS eDrawings EPRT file reader allows attackers to execute arbitrary code via a specially crafted file.

Executive Summary:
A critical out of bounds write flaw in Dassault Systèmes SOLIDWORKS eDrawings exposes users to remote code execution risks when opening malicious EPRT files.

Vulnerability Details

CVE-ID: CVE-2026-1284

Affected Software: Dassault Systèmes SOLIDWORKS eDrawings

Affected Versions: Release SOLIDWORKS Desktop 2025 SP0 through SP5, Release SOLIDWORKS Desktop 2026 SP0

Vulnerability: This is an out of bounds write vulnerability (CWE-787) triggered during the processing of EPRT files. The vulnerability allows an unauthenticated attacker to achieve arbitrary code execution on the host system if a user is enticed to open a specially crafted file.

Business Impact

The potential for arbitrary code execution poses a severe risk to organizational security, as it could lead to full system compromise, data exfiltration, or the deployment of ransomware. Given the CVSS score of 7.8, the impact is considered High: it necessitates immediate attention, particularly in engineering environments where CAD file exchange is frequent and often perceived as trusted.

Remediation Plan

Immediate Action: Review the official Dassault Systèmes security advisory at https://www.3ds.com/trust-center/security/security-advisories/cve-2026-1284 and apply all available security updates for affected SOLIDWORKS Desktop versions.

Proactive Monitoring: Monitor file integrity and endpoint logs for suspicious process execution patterns originating from the SOLIDWORKS eDrawings application.

Compensating Controls: Restrict the opening of EPRT files from untrusted or external sources and ensure that users operate with the principle of least privilege to limit the potential reach of a successful exploit.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of January 28, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While the flaw is not currently being exploited, the nature of memory corruption vulnerabilities makes this a high-value target for threat actors.

Analyst Recommendation

Users of SOLIDWORKS eDrawings should treat this vulnerability with high urgency. Because the attack vector relies on the user opening a file, internal security awareness training should be supplemented with the immediate application of vendor patches. Failure to remediate could allow attackers to gain unauthorized control over engineering workstations.

Description Summary:
A heap-based buffer overflow in the EPRT file reading procedure of SOLIDWORKS eDrawings allows arbitrary code execution via a specially crafted EPRT file.

Executive Summary:
A heap-based buffer overflow vulnerability in Dassault Systèmes SOLIDWORKS eDrawings poses a critical risk of arbitrary code execution when processing malicious EPRT files.

Vulnerability Details

CVE-ID: CVE-2026-1283

Affected Software: Dassault Systèmes SOLIDWORKS eDrawings

Affected Versions: Release SOLIDWORKS Desktop 2025 SP0 through Release SOLIDWORKS Desktop 2025 SP5, Release SOLIDWORKS Desktop 2026 SP0

Vulnerability: This is a heap-based buffer overflow (CWE-122) occurring during the parsing of EPRT files. The vulnerability requires user interaction to open a malicious file, but it does not require authentication to trigger.

Business Impact

The vulnerability carries a CVSS score of 7.8, reflecting a High severity rating due to the potential for total system compromise. A successful exploit could lead to full unauthorized access to the host workstation, resulting in data theft, loss of intellectual property, or the potential for lateral movement within the corporate network.

Remediation Plan

Immediate Action: Monitor the official Dassault Systèmes security advisory page for the release of a corrective patch and apply it to all affected workstations immediately upon availability.

Proactive Monitoring: Review application logs for unusual file processing errors or unexpected crashes related to eDrawings.

Compensating Controls: Restrict the opening of untrusted or externally sourced EPRT files and ensure that endpoint protection software is configured to detect malicious file structures.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of January 28, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While the vulnerability is not currently being exploited in the wild, the potential for arbitrary code execution necessitates prompt attention once the vendor issues a fix.

Analyst Recommendation

Given the high impact of this memory corruption flaw, organizations should treat this as a high-priority item. Users should exercise extreme caution when handling EPRT files from untrusted sources until a security update is applied. Administrators must track the vendor advisory and deploy the necessary patches to all endpoints as soon as they become available.

Description Summary:
A deserialization of untrusted data vulnerability in the 3DEXPERIENCE Station Launcher App allows unauthenticated remote code execution.

Executive Summary:
A critical deserialization vulnerability in the Dassault Systèmes 3DEXPERIENCE platform allows unauthenticated remote attackers to execute arbitrary code with full system privileges.

Vulnerability Details

CVE-ID: CVE-2026-11756

Affected Software: Dassault Systèmes 3DEXPERIENCE platform (Station Launcher App)

Affected Versions: Release 3DEXPERIENCE R2023x Golden through R2023x.FP.CFA.2613, Release 3DEXPERIENCE R2024x Golden through R2024x.FP.CFA.2615, Release 3DEXPERIENCE R2025x Golden through R2025x.FP.CFA.2628, Release 3DEXPERIENCE R2026x Golden through R2026x.FP.CFA.2624

Vulnerability: This is a deserialization of untrusted data flaw (CWE-502) within the Station Launcher App. The vulnerability is exploitable by unauthenticated remote attackers, as confirmed by the CVSS vector AV:N/PR:N.

Business Impact

The ability for an unauthenticated attacker to execute remote code poses a catastrophic risk to the integrity, confidentiality, and availability of the 3DEXPERIENCE platform. Given the CVSS score of 10.0, this vulnerability could lead to total system compromise, unauthorized access to sensitive product design data, and potential lateral movement within the corporate network.

Remediation Plan

Immediate Action: Update the Dassault Systèmes Station Launcher App to the latest version provided by the vendor. Refer to the official security advisory for specific build requirements.

Proactive Monitoring: Monitor server logs for suspicious deserialization attempts or unusual process execution patterns originating from the Station Launcher service.

Compensating Controls: Deploy a Web Application Firewall (WAF) with inspection capabilities for serialized objects to potentially block malicious payloads if immediate patching is not feasible.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of July 28, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's inherent nature as an unauthenticated remote code execution vulnerability makes it a high-priority target for threat actors.

Analyst Recommendation

Due to the critical severity and the potential for full system compromise, organizations running the affected versions of the 3DEXPERIENCE platform must prioritize this update. Immediate patching is the only effective way to mitigate the risk of remote code execution.

Description Summary:
A command injection vulnerability in the 3DEXPERIENCE Station Launcher App allows an authenticated attacker to execute arbitrary code on the victim's machine.

Executive Summary:
A critical OS command injection vulnerability in the Dassault Systèmes 3DEXPERIENCE Station Launcher App enables remote code execution on the host system.

Vulnerability Details

CVE-ID: CVE-2025-9976

Affected Software: Dassault Systèmes 3DEXPERIENCE platform (Station Launcher App)

Affected Versions: Release 3DEXPERIENCE R2022x Golden through R2022x.FP.CFA.2540, R2023x Golden through R2023x.FP.CFA.2532, R2024x Golden through R2024x.FP.CFA.2537, and R2025x Golden through R2025x.FP.CFA.2532.

Vulnerability: This is an OS command injection flaw (CWE-78) occurring within the Station Launcher App. The vulnerability requires the attacker to have low-level privileges and relies on user interaction to trigger the command execution on the client machine.

Business Impact

The ability to execute arbitrary code on an end-user machine poses a severe risk to organizational security, including the potential for unauthorized data access, lateral movement within the corporate network, and complete system compromise. With a CVSS score of 9.0, this vulnerability is classified as critical, as it provides an attacker with the capability to perform actions with the privileges of the logged-in user.

Remediation Plan

Immediate Action: Apply the vendor-provided updates for the 3DEXPERIENCE platform as detailed in the official security advisory available on the Dassault Systèmes trust center.

Proactive Monitoring: Review endpoint logs for suspicious child processes spawned by the Station Launcher App and monitor for anomalous outbound network connections from workstations.

Compensating Controls: Restrict user permissions where possible to limit the potential impact of code execution and ensure endpoint detection and response tools are configured to alert on unauthorized command-line activity.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Oct 13, 2025, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While the exploitability requires user interaction, the potential for total impact on the affected system necessitates prompt patching.

Analyst Recommendation

Given the critical nature of this OS command injection vulnerability, administrators should prioritize the deployment of the latest updates provided by Dassault Systèmes. Failure to patch these specific releases leaves end-user machines susceptible to full code execution, which could lead to broader infrastructure compromise if not addressed immediately.

Description Summary:
A use of uninitialized variable vulnerability in the JT file reading procedure of SOLIDWORKS eDrawings 2025 allows for arbitrary code execution via a specially crafted file.

Executive Summary:
A critical vulnerability in SOLIDWORKS eDrawings 2025 permits arbitrary code execution, posing a significant risk to workstations that process untrusted JT files.

Vulnerability Details

CVE-ID: CVE-2025-9450

Affected Software: Dassault Systèmes SOLIDWORKS eDrawings

Affected Versions: Dassault Systèmes SOLIDWORKS eDrawings: Release SOLIDWORKS Desktop 2025 SP0 through Release SOLIDWORKS Desktop 2025 SP3

Vulnerability: The software contains a use of uninitialized variable flaw (CWE-457) within the JT file parsing logic. This vulnerability can be triggered by an unauthenticated attacker if they successfully convince a user to open a malicious JT file.

Business Impact

The ability to achieve arbitrary code execution on a workstation allows an attacker to gain full control over the affected system. Given the CVSS score of 7.8, this represents a high-severity risk that could lead to lateral movement within the corporate network, data theft, or the deployment of ransomware.

Remediation Plan

Immediate Action: Organizations should restrict the opening of JT files from untrusted sources until a security update is confirmed and applied. Monitor official Dassault Systèmes security advisories for the release of a corrective patch.

Proactive Monitoring: Security teams should monitor workstation process execution logs for unusual child processes spawned by eDrawings.exe, particularly those involving command shells or network connections.

Compensating Controls: Utilize endpoint detection and response tools to flag or block the execution of SOLIDWORKS eDrawings when processing files originating from external or untrusted email attachments and downloads.

Exploitation Status

Public Exploit Available: No (exploit_available: false)

Analyst Notes: As of September 18, 2025, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw requires user interaction to trigger the parsing logic, making it a target for social engineering campaigns.

Analyst Recommendation

This vulnerability presents a clear risk to design and engineering environments where external files are frequently imported. Administrators should prioritize the identification of affected SOLIDWORKS Desktop 2025 instances and ensure that users are educated on the risks of opening unsolicited files until the vendor provides a finalized security update.

Description Summary:
A Use After Free vulnerability in the PAR file reading procedure of SOLIDWORKS eDrawings 2025 allows local attackers to achieve arbitrary code execution via a specially crafted file.

Executive Summary:
A critical Use After Free vulnerability in SOLIDWORKS eDrawings 2025 exposes users to arbitrary code execution when processing malicious PAR files.

Vulnerability Details

CVE-ID: CVE-2025-9449

Affected Software: Dassault Systèmes SOLIDWORKS eDrawings

Affected Versions: Release SOLIDWORKS Desktop 2025 SP0 through Release SOLIDWORKS Desktop 2025 SP3

Vulnerability: This is a Use After Free vulnerability (CWE-416) triggered during the PAR file parsing process. The flaw requires user interaction to open a malicious file, but it does not require authentication to trigger.

Business Impact

The ability to execute arbitrary code on a workstation can lead to total system compromise, unauthorized access to proprietary engineering data, and potential lateral movement within the corporate network. With a CVSS score of 7.8, this vulnerability represents a high risk, particularly for design and manufacturing environments where intellectual property is a primary target.

Remediation Plan

Immediate Action: Users should restrict the opening of PAR files from untrusted sources and monitor the official Dassault Systèmes Trust Center for the release of a security patch.

Proactive Monitoring: Security teams should monitor workstation endpoint logs for abnormal application crashes or unexpected child processes spawned by the eDrawings application.

Compensating Controls: Deploy endpoint protection solutions capable of detecting malicious file execution and implement strict application control policies to limit the execution of untrusted binaries.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of September 18, 2025, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability relies on user interaction, which typically limits the attack surface to spear-phishing or social engineering campaigns.

Analyst Recommendation

Given the potential for remote code execution, organizations utilizing SOLIDWORKS eDrawings 2025 must prioritize this issue. Until a vendor-supplied patch is available, technical teams should communicate the risk of opening untrusted PAR files to all relevant personnel and ensure that endpoint security software is fully updated to detect suspicious activity.

Description Summary:
An out-of-bounds read vulnerability in the PAR file parsing procedure of SOLIDWORKS eDrawings 2025 may allow for arbitrary code execution via a specially crafted file.

Executive Summary:
A critical out-of-bounds read vulnerability in SOLIDWORKS eDrawings 2025 could allow an attacker to achieve arbitrary code execution through the processing of malicious PAR files.

Vulnerability Details

CVE-ID: CVE-2025-9447

Affected Software: Dassault Systèmes SOLIDWORKS eDrawings

Affected Versions: Release SOLIDWORKS Desktop 2025 SP0 through Release SOLIDWORKS Desktop 2025 SP3

Vulnerability: This vulnerability is an out-of-bounds read (CWE-125) occurring within the PAR file reading procedure. It requires user interaction to open a specially crafted file, but does not require prior authentication by the attacker.

Business Impact

Successful exploitation of this vulnerability could lead to full system compromise, as the flaw permits arbitrary code execution. Given the CVSS score of 7.8, this represents a high-severity risk that could result in the theft of proprietary design data, unauthorized access to internal systems, or severe operational disruption.

Remediation Plan

Immediate Action: Users should restrict the opening of untrusted PAR files and apply security updates provided by Dassault Systèmes as soon as they become available.

Proactive Monitoring: Monitor endpoint activity for unexpected process execution or abnormal memory usage patterns associated with the eDrawings application.

Compensating Controls: Utilize file integrity monitoring and ensure that endpoint security solutions are configured to scan files for malicious signatures before they are opened by users.

Exploitation Status

Public Exploit Available: No (exploit_available: unknown)

Analyst Notes: As of September 18, 2025, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's requirement for user interaction limits its exploitability in automated environments, but the potential for arbitrary code execution remains a significant security concern.

Analyst Recommendation

Due to the potential for arbitrary code execution, this vulnerability poses a significant risk to the integrity and confidentiality of engineering environments. Organizations utilizing the affected versions of SOLIDWORKS eDrawings should treat this as a high-priority item and ensure that all systems are patched immediately upon the release of a vendor fix.

Description Summary:
A Use After Free vulnerability in the IPT file reading procedure of SOLIDWORKS eDrawings may allow for arbitrary code execution via a specially crafted file.

Executive Summary:
A critical Use After Free vulnerability in Dassault Systèmes SOLIDWORKS eDrawings 2025 allows an unauthenticated attacker to achieve arbitrary code execution by enticing a user to open a malicious IPT file.

Vulnerability Details

CVE-ID: CVE-2025-7042

Affected Software: Dassault Systèmes SOLIDWORKS eDrawings

Affected Versions: Release SOLIDWORKS Desktop 2025 SP0 through Release SOLIDWORKS Desktop 2025 SP2

Vulnerability: This is a Use After Free vulnerability (CWE-416) triggered during the IPT file parsing process. The flaw requires user interaction to open a malicious file, but it does not require prior authentication to execute.

Business Impact

Successful exploitation of this vulnerability could lead to a complete compromise of the affected workstation, enabling an attacker to execute arbitrary code with the privileges of the logged in user. With a CVSS score of 7.8, this represents a high risk to business operations, as it could facilitate unauthorized data exfiltration, the installation of persistent backdoors, or lateral movement within the corporate network.

Remediation Plan

Immediate Action: Update SOLIDWORKS eDrawings to the latest patched version as identified in the official Dassault Systèmes security advisory.

Proactive Monitoring: Monitor endpoint logs for abnormal process execution patterns originating from eDrawings or unexpected file handling errors.

Compensating Controls: Implement strict email filtering and endpoint protection policies to block or scan suspicious IPT files before they reach end user workstations.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 16, 2025, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently dangerous because it leverages common file parsing workflows that users frequently perform, making it a viable target for social engineering campaigns.

Analyst Recommendation

Given the potential for arbitrary code execution and the high CVSS severity, administrators should prioritize patching all instances of SOLIDWORKS eDrawings 2025 within the environment. Users should be cautioned against opening IPT files from untrusted or unexpected sources until the software updates are successfully applied.

Description Summary:
A use of uninitialized variable vulnerability in the JT file reading process of SOLIDWORKS eDrawings allows for potential arbitrary code execution via specially crafted files.

Executive Summary:
A critical use of uninitialized variable vulnerability in SOLIDWORKS eDrawings allows attackers to achieve arbitrary code execution by enticing a user to open a malicious JT file.

Vulnerability Details

CVE-ID: CVE-2025-6974

Affected Software: Dassault Systèmes SOLIDWORKS eDrawings

Affected Versions: Release SOLIDWORKS Desktop 2025 SP0 through Release SOLIDWORKS Desktop 2025 SP2

Vulnerability: The vulnerability exists within the JT file parsing mechanism, which fails to properly initialize variables before use. An attacker can exploit this flaw by providing a specially crafted JT file that, when opened by an unsuspecting user, triggers memory corruption leading to arbitrary code execution.

Business Impact

The potential for arbitrary code execution poses a severe risk to organizational security, as it could lead to full system compromise, unauthorized data exfiltration, or the installation of persistent threats. With a CVSS score of 7.8, this high-severity flaw represents a significant threat to environments where 3D CAD data is frequently shared and opened. The reliance on user interaction via file opening does not diminish the risk, as such vectors are common in targeted phishing or supply chain attacks.

Remediation Plan

Immediate Action: Users should restrict the opening of JT files from untrusted or unverified sources until a security update is applied. Monitor the official Dassault Systèmes trust center for the release of a patched version of SOLIDWORKS eDrawings.

Proactive Monitoring: Security teams should monitor endpoint logs for abnormal process behavior or unexpected crashes in the eDrawings application when processing CAD files.

Compensating Controls: Deploy endpoint detection and response (EDR) solutions to identify and block suspicious file-handling activities or unauthorized child processes spawned by the eDrawings application.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 16, 2025, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. While the flaw is theoretically dangerous, the requirement for a user to open a specially crafted file limits the immediate automated exploitation surface.

Analyst Recommendation

Given the potential for arbitrary code execution, this vulnerability warrants immediate attention despite the requirement for user interaction. Organizations should prioritize updating their SOLIDWORKS installations as soon as the vendor provides a fix. In the interim, enforce strict policies regarding the handling of third-party JT files to mitigate the primary attack vector.

Description Summary:
A Use After Free vulnerability in the JT file reading procedure of SOLIDWORKS eDrawings allows an attacker to execute arbitrary code via a specially crafted file.

Executive Summary:
A critical Use After Free vulnerability in SOLIDWORKS eDrawings 2025 allows local attackers to execute arbitrary code by enticing a user to open a malicious JT file.

Vulnerability Details

CVE-ID: CVE-2025-6973

Affected Software: Dassault Systèmes SOLIDWORKS eDrawings

Affected Versions: Release SOLIDWORKS Desktop 2025 SP0 through Release SOLIDWORKS Desktop 2025 SP2

Vulnerability: The software contains a Use After Free flaw (CWE-416) within its JT file parsing logic. An unauthenticated attacker can trigger memory corruption leading to arbitrary code execution if a user is tricked into opening a specially crafted JT file.

Business Impact

Successful exploitation allows an attacker to gain the same execution privileges as the user running the application, potentially leading to full system compromise. With a CVSS score of 7.8, this flaw represents a significant risk to workstations, as it could facilitate lateral movement or data theft following a successful file-based attack.

Remediation Plan

Immediate Action: Update to the latest version of SOLIDWORKS eDrawings as provided by the vendor security advisory to patch the JT file parsing library.

Proactive Monitoring: Monitor endpoint logs for abnormal application crashes or unexpected child processes spawned by the eDrawings executable.

Compensating Controls: Implement file integrity monitoring and restrict the opening of untrusted JT files from external or unverified sources until patches are fully deployed.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of July 16, 2025, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw requires user interaction, typically through social engineering, to deliver the malicious file to the target system.

Analyst Recommendation

Given the potential for arbitrary code execution, organizations should prioritize updating all instances of SOLIDWORKS eDrawings 2025. Users should be cautioned against opening JT files from untrusted sources until the recommended vendor patches are applied across the environment.

Description Summary:
A Use After Free vulnerability in the SOLIDWORKS eDrawings CATPRODUCT file parser allows attackers to execute arbitrary code via a malicious file.

Executive Summary:
A critical Use After Free vulnerability in SOLIDWORKS eDrawings exposes users to potential arbitrary code execution when opening specially crafted CATPRODUCT files.

Vulnerability Details

CVE-ID: CVE-2025-6972

Affected Software: Dassault Systèmes SOLIDWORKS eDrawings

Affected Versions: Release SOLIDWORKS Desktop 2025 SP0 through Release SOLIDWORKS Desktop 2025 SP2

Vulnerability: This flaw is a Use After Free (CWE-416) vulnerability triggered during the processing of CATPRODUCT files. An unauthenticated attacker can trigger this condition by providing a victim with a maliciously crafted file that, when opened, results in memory corruption and potential code execution.

Business Impact

Successful exploitation of this vulnerability allows an attacker to achieve arbitrary code execution on the host machine. Given the CVSS score of 7.8, this poses a significant risk to organizational endpoints, potentially leading to total system compromise, unauthorized data access, and the lateral movement of threats within the internal network.

Remediation Plan

Immediate Action: Users should immediately update to the latest available version of SOLIDWORKS eDrawings as provided by Dassault Systèmes to incorporate the necessary security patches.

Proactive Monitoring: Security teams should monitor endpoint logs for unusual process execution patterns or crashes originating from the eDrawings application.

Compensating Controls: Restrict the opening of untrusted or externally sourced CATPRODUCT files within the environment and utilize endpoint protection software to scan files for known malicious signatures.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of July 16, 2025, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability requires user interaction to open a malicious file, which acts as a primary barrier to entry for attackers.

Analyst Recommendation

This vulnerability represents a high risk to workstations running SOLIDWORKS eDrawings. Organizations must prioritize patching affected systems to prevent potential remote code execution scenarios. Until updates are deployed, users should exercise extreme caution when handling CATPRODUCT files from untrusted sources.

Description Summary:
A Use After Free vulnerability in the SOLIDWORKS eDrawings CATPRODUCT file reading procedure allows an attacker to execute arbitrary code via a specially crafted file.

Executive Summary:
A critical Use After Free vulnerability in SOLIDWORKS eDrawings allows for arbitrary code execution, posing a severe risk to local system integrity.

Vulnerability Details

CVE-ID: CVE-2025-6971

Affected Software: Dassault Systèmes SOLIDWORKS eDrawings

Affected Versions: Release SOLIDWORKS Desktop 2025 SP0 through Release SOLIDWORKS Desktop 2025 SP2

Vulnerability: This is a Use After Free vulnerability (CWE-416) triggered during the processing of CATPRODUCT files. An attacker can leverage this flaw by inducing a user to open a malicious file, leading to potential arbitrary code execution with the privileges of the victim.

Business Impact

The vulnerability carries a CVSS score of 7.8, indicating a high level of severity. Successful exploitation could result in full system compromise, data theft, or the installation of persistent malware within the corporate environment. Because the attack vector requires user interaction, it represents a significant risk for organizations that frequently exchange CAD files from untrusted or external sources.

Remediation Plan

Immediate Action: Review the official Dassault Systèmes security advisory at https://www.3ds.com/trust-center/security/security-advisories/cve-2025-6971 and apply all recommended patches or service packs as soon as they become available.

Proactive Monitoring: Monitor endpoint logs for abnormal crashes or unexpected behavior associated with the eDrawings application process.

Compensating Controls: Implement organizational policies that restrict the opening of CAD files from unverified or external email attachments until the software is updated.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of July 16, 2025, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The Use After Free condition is a classic memory corruption flaw that typically requires precise heap manipulation to weaponize successfully.

Analyst Recommendation

Given the potential for arbitrary code execution, this vulnerability should be treated as a high priority for engineering and design teams. IT administrators must ensure that all instances of SOLIDWORKS Desktop 2025 are updated to a non-vulnerable version immediately upon vendor release to prevent potential exploitation.

Description Summary:
A missing authorization vulnerability in Dassault Systèmes DELMIA Apriso allows unauthenticated remote attackers to gain privileged access to the application.

Executive Summary:
A critical missing authorization vulnerability in Dassault Systèmes DELMIA Apriso is currently being exploited in the wild, posing a severe risk of unauthorized privileged access.

Vulnerability Details

CVE-ID: CVE-2025-6205

Affected Software: Dassault Systèmes DELMIA Apriso

Affected Versions: Release 2020 Golden through Release 2020 SP4, Release 2021 Golden through Release 2021 SP3, Release 2022 Golden through Release 2022 SP3, Release 2023 Golden through Release 2023 SP3, Release 2024 Golden through Release 2024 SP1, Release 2025 Golden through Release 2025 SP1

Vulnerability: The application fails to perform proper authorization checks, allowing an unauthenticated remote attacker to bypass security controls and obtain administrative-level access to the system.

Business Impact

Successful exploitation of this vulnerability allows an attacker to gain full privileged access to the DELMIA Apriso platform. With a CVSS score of 9.5, this flaw presents a critical risk to business operations, as it could lead to the total compromise of sensitive manufacturing data, unauthorized modification of production processes, and significant reputational damage.

Remediation Plan

Immediate Action: Apply the vendor-provided security patches immediately by visiting the official Dassault Systèmes security advisory page at https://www.3ds.com/trust-center/security/security-advisories/cve-2025-6205.

Proactive Monitoring: Monitor application access logs for unusual administrative activity or spikes in unauthorized access attempts originating from external or non-standard IP ranges.

Compensating Controls: Implement strict network segmentation and utilize a Web Application Firewall to filter traffic, blocking requests that attempt to access administrative endpoints without valid authentication tokens.

Exploitation Status

Public Exploit Available: No (there is no confirmed weaponized exploit, though a detection template exists).

Analyst Notes: This vulnerability is confirmed to be actively exploited in the wild as of October 27, 2025. Given its inclusion in the CISA Known Exploited Vulnerabilities catalog, organizations should prioritize remediation above all other maintenance tasks.

Analyst Recommendation

The critical nature of this vulnerability, combined with confirmed active exploitation, necessitates immediate action. Administrators must verify their software versions against the affected list and apply the necessary patches provided by Dassault Systèmes without delay. Failure to address this flaw leaves systems exposed to complete administrative takeover.

Description Summary:
A code injection vulnerability in Dassault Systèmes DELMIA Apriso allows an authenticated attacker with high privileges to execute arbitrary code on the host server.

Executive Summary:
This critical code injection vulnerability in Dassault Systèmes DELMIA Apriso is currently being exploited in the wild, posing a severe risk of unauthorized remote code execution.

Vulnerability Details

CVE-ID: CVE-2025-6204

Affected Software: Dassault Systèmes DELMIA Apriso

Affected Versions: Release 2020 Golden through Release 2020 SP4, Release 2021 Golden through Release 2021 SP3, Release 2022 Golden through Release 2022 SP3, Release 2023 Golden through Release 2023 SP3, Release 2024 Golden through Release 2024 SP1, Release 2025 Golden through Release 2025 SP1

Vulnerability: This is an Improper Control of Generation of Code (CWE-94) flaw. It permits an authenticated attacker with high privileges to inject and execute arbitrary code, potentially leading to total system compromise when chained with other vulnerabilities like CVE-2025-6205.

Business Impact

With a CVSS score of 9.5, this vulnerability represents an extreme threat to manufacturing environments utilizing DELMIA Apriso. Successful exploitation grants attackers the ability to execute arbitrary code, which can result in full server compromise, theft of intellectual property, or the disruption of critical production processes. The active exploitation of this flaw significantly increases the likelihood of a high-impact security incident.

Remediation Plan

Immediate Action: Apply the security patches released by Dassault Systèmes in early August 2025 immediately to all affected instances.

Proactive Monitoring: Review system logs for suspicious process execution, unauthorized changes to application configuration files, or anomalous service behavior that may indicate post-exploitation activity.

Compensating Controls: Ensure that access to the DELMIA Apriso management interface is restricted to authorized personnel only, and utilize Web Application Firewalls to inspect and block malicious payloads directed at the application.

Exploitation Status

Public Exploit Available: Yes, as documented by the inclusion of this vulnerability in the CISA Known Exploited Vulnerabilities catalog.

Analyst Notes: This vulnerability is confirmed to be actively exploited in the wild as of October 27, 2025. Given the high-privilege requirement, organizations must prioritize auditing administrative accounts to identify potential compromise already in progress.

Analyst Recommendation

The critical nature of this vulnerability, combined with its status in the CISA Known Exploited Vulnerabilities catalog, necessitates an immediate response. IT and security teams must treat this as a high-priority incident and deploy the vendor-provided patches without delay to prevent unauthorized code execution and potential production downtime.

Description Summary:
A deserialization of untrusted data vulnerability in Dassault Systèmes DELMIA Apriso allows unauthenticated remote attackers to execute arbitrary code.

Executive Summary:
This critical deserialization vulnerability in DELMIA Apriso is currently being exploited in the wild, posing an immediate risk of full system compromise.

Vulnerability Details

CVE-ID: CVE-2025-5086

Affected Software: Dassault Systèmes DELMIA Apriso

Affected Versions: Release 2020 Golden through Release 2020 SP4, Release 2021 Golden through Release 2021 SP3, Release 2022 Golden through Release 2022 SP3, Release 2023 Golden through Release 2023 SP3, Release 2024 Golden through Release 2024 SP1, Release 2025 Golden through Release 2025 SP1

Vulnerability: This is a deserialization of untrusted data flaw (CWE-502) that allows an unauthenticated remote attacker to execute arbitrary code on the host server. The attack involves sending a crafted HTTP request containing a Base64 encoded payload, which is subsequently decompressed and executed by the application.

Business Impact

With a CVSS score of 9.5, this vulnerability represents a critical risk to organizational security. Successful exploitation could lead to total system compromise, including the loss of data confidentiality and integrity. Furthermore, because DELMIA Apriso is often integrated into manufacturing environments, an attacker could leverage this access to pivot into sensitive operational technology (OT) networks, resulting in significant production downtime and severe reputational damage.

Remediation Plan

Immediate Action: Apply the security updates provided by Dassault Systèmes immediately via their official customer support and advisory portal.

Proactive Monitoring: Monitor network traffic for anomalous HTTP requests containing suspicious Base64 encoded strings or unexpected GZIP compressed data payloads directed at DELMIA Apriso endpoints.

Compensating Controls: Implement Web Application Firewall (WAF) rules to inspect and block inbound HTTP requests that exhibit patterns associated with serialized object injection or unexpected binary payloads.

Exploitation Status

Public Exploit Available: Yes, as the SANS Internet Storm Center has documented active exploitation attempts involving specific malicious payload structures.

Analyst Notes: This vulnerability is confirmed to be actively exploited in the wild as of September 11, 2025. It is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog due to evidence of malicious actors targeting exposed instances with the intent of achieving remote code execution.

Analyst Recommendation

Given the confirmed active exploitation and the critical nature of this vulnerability, organizations must treat patching as an urgent priority. Administrators should verify their current version against the affected list and apply the vendor provided security updates without delay. If immediate patching is not possible, prioritize isolating affected instances from the internet to prevent unauthorized access while remediation efforts are finalized.

Description Summary:
A reflected Cross-site Scripting (XSS) vulnerability in ENOVIA Collaborative Industry Innovator allows authenticated attackers to execute arbitrary script code in a user's browser session.

Executive Summary:
A reflected Cross-site Scripting vulnerability in Dassault Systèmes ENOVIA Collaborative Industry Innovator poses a significant risk of session hijacking and unauthorized actions by authenticated attackers.

Vulnerability Details

CVE-ID: CVE-2025-12956

Affected Software: Dassault Systèmes ENOVIA Collaborative Industry Innovator

Affected Versions: Release 3DEXPERIENCE R2022x Golden through R2022x.FP.CFA.2521, R2023x Golden through R2023x.FP.CFA.2523, R2024x Golden through R2024x.FP.CFA.2519, R2025x Golden through R2024x.FP.CFA.2524

Vulnerability: This is a reflected Cross-site Scripting (CWE-79) vulnerability where the application fails to properly sanitize user-supplied input. An authenticated attacker can leverage this flaw to execute malicious scripts within the context of another user's browser session.

Business Impact

The CVSS score of 8.7 indicates a high severity rating, primarily due to the potential for high impact on confidentiality and integrity. Successful exploitation could lead to the theft of sensitive session tokens, unauthorized access to proprietary project data, or the execution of unauthorized actions on behalf of legitimate users.

Remediation Plan

Immediate Action: Review the official Dassault Systèmes trust center security advisory for the latest available security patches or configuration changes. Apply all recommended vendor updates to the affected 3DEXPERIENCE platform releases as soon as they are made available.

Proactive Monitoring: Monitor web application logs for suspicious URL parameters containing encoded script tags or unusual JavaScript patterns. Implement content security policies to restrict the execution of unauthorized scripts within the browser environment.

Compensating Controls: Deploy a Web Application Firewall with robust XSS filtering rules to detect and block malicious payloads directed at the application's endpoints.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of December 9, 2025, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw requires the attacker to be authenticated, which limits the attack surface to existing users within the environment.

Analyst Recommendation

Given the high CVSS severity, organizations utilizing the affected releases of ENOVIA Collaborative Industry Innovator must prioritize the identification and remediation of this flaw. Administrators should monitor the vendor security portal closely for the release of specific patches and ensure that security controls are tightened to prevent script injection until updates are successfully applied.

Description Summary:
A path traversal vulnerability in Dassault Systèmes DELMIA Factory Resource Manager allows authenticated attackers to read or write files in specific server directories.

Executive Summary:
A path traversal vulnerability in Dassault Systèmes DELMIA Factory Resource Manager allows authenticated attackers to perform unauthorized file operations, posing a significant risk to data integrity and confidentiality.

Vulnerability Details

CVE-ID: CVE-2025-10559

Affected Software: Dassault Systèmes DELMIA Factory Resource Manager

Affected Versions: Release 3DEXPERIENCE R2023x Golden through R2023x.FP.CFA.2541, R2024x Golden through R2024x.FP.CFA.2537, R2025x Golden through R2025x.FP.CFA.2514

Vulnerability: The vulnerability is a path traversal flaw (CWE-22) residing in the Factory Resource Management component, which fails to properly sanitize user input. According to the CVSS vector (PR:L), this requires an authenticated user with low privileges to trigger the flaw.

Business Impact

Successful exploitation allows an attacker to read sensitive configuration files or overwrite critical system files on the server. Given the CVSS score of 7.1, this vulnerability is classified as High severity, as it facilitates unauthorized access to potentially sensitive data and could lead to system instability or further compromise of the host environment.

Remediation Plan

Immediate Action: Review the official security advisory at the Dassault Systèmes Trust Center and apply the latest available patches or functional packs for your specific release.

Proactive Monitoring: Monitor server access logs for unusual path patterns, such as sequences containing directory traversal characters like dot-dot-slash, directed at the Factory Resource Management component.

Compensating Controls: Implement strict file system permissions for the service account running the application to limit the scope of potential file read or write operations. A Web Application Firewall may also be configured to block suspicious requests containing path traversal sequences.

Exploitation Status

Public Exploit Available: No (exploit_available unknown).

Analyst Notes: As of April 1, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's inherent exploitability is limited by the requirement for authenticated access, but the ability to write files makes it a serious concern for internal threat scenarios.

Analyst Recommendation

Organizations utilizing the affected versions of DELMIA Factory Resource Manager should prioritize this update to prevent potential unauthorized file system access. Administrators must verify their current release version against the provided list and coordinate with the vendor to ensure the integrity of the application environment.

Description Summary:
A stored Cross-site Scripting (XSS) vulnerability in 3DSearch within 3DSwymer allows authenticated attackers to execute arbitrary script code in a user's browser session.

Executive Summary:
A stored Cross-site Scripting vulnerability in Dassault Systèmes 3DSwymer poses a high risk of unauthorized script execution within user sessions.

Vulnerability Details

CVE-ID: CVE-2025-10558

Affected Software: Dassault Systèmes 3DSwymer

Affected Versions: Release 3DEXPERIENCE R2025x Golden through Release 3DEXPERIENCE R2025x FP.CFA.2514

Vulnerability: This is a stored Cross-site Scripting (XSS) vulnerability (CWE-79) residing in the 3DSearch component. The vulnerability requires an attacker to have low-level authenticated access to inject malicious scripts that execute in the context of other users' browser sessions.

Business Impact

The exploitation of this vulnerability allows an attacker to compromise user sessions, potentially leading to unauthorized data access, session hijacking, or the execution of malicious actions on behalf of the victim. Given the CVSS score of 8.7, this flaw presents a significant risk to organizational data integrity and user privacy. Successful exploitation could lead to severe reputational damage and unauthorized access to sensitive project information stored within the 3DEXPERIENCE platform.

Remediation Plan

Immediate Action: Review the official Dassault Systèmes security advisory at the provided reference link to identify the specific update or configuration change required to remediate this vulnerability.

Proactive Monitoring: Monitor web application logs for suspicious script injection patterns or unusual user activity originating from the 3DSearch component.

Compensating Controls: Implement a strict Content Security Policy (CSP) to restrict the execution of unauthorized scripts and utilize a Web Application Firewall (WAF) to filter malicious input patterns targeting the 3DSearch interface.

Exploitation Status

Public Exploit Available: No (exploit_available: false).

Analyst Notes: As of October 14, 2025, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The requirement for authenticated access reduces the overall exploitability compared to unauthenticated vectors, but the stored nature of the payload creates a persistent threat to any user interacting with the compromised data.

Analyst Recommendation

Organizations utilizing 3DSwymer within the 3DEXPERIENCE R2025x environment must prioritize this update to prevent potential session compromise. Due to the high CVSS score and the persistent nature of stored XSS, administrators should apply the vendor-provided fixes as soon as they are released and verify that affected versions are no longer in operation.

Description Summary:
A stored Cross-site Scripting (XSS) vulnerability in ENOVIA Collaborative Industry Innovator allows authenticated attackers to execute arbitrary script code in a victim's browser session.

Executive Summary:
A stored Cross-site Scripting vulnerability in Dassault Systèmes ENOVIA Collaborative Industry Innovator poses a significant risk of unauthorized script execution within user browser sessions.

Vulnerability Details

CVE-ID: CVE-2025-10557

Affected Software: Dassault Systèmes ENOVIA Collaborative Industry Innovator

Affected Versions: Release 3DEXPERIENCE R2022x Golden through R2022x.FP.CFA.2513, R2023x Golden through R2023x.FP.CFA.2514, R2024x Golden through R2024x.FP.CFA.2510, R2025x Golden through R2025x.FP.CFA.2514

Vulnerability: This is a stored Cross-site Scripting (XSS) flaw (CWE-79) within the Issue Management function. An attacker with low privileges can inject malicious scripts that execute in the context of an unsuspecting user's browser session.

Business Impact

Successful exploitation allows an attacker to manipulate the user interface or capture sensitive session data, leading to potential account takeover or unauthorized actions performed on behalf of legitimate users. Given the high CVSS score of 8.7, this vulnerability represents a significant risk to organizational data integrity and internal system security.

Remediation Plan

Immediate Action: Review the official security advisory from Dassault Systèmes to identify and apply the specific hotfix or cumulative update release corresponding to your deployment.

Proactive Monitoring: Monitor web application logs for suspicious input patterns or requests directed at the Issue Management module that deviate from standard operational behavior.

Compensating Controls: Implement a robust Content Security Policy (CSP) to restrict the execution of unauthorized scripts and utilize a Web Application Firewall (WAF) to filter malicious payloads targeting XSS vectors.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of October 14, 2025, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw requires the attacker to hold low-level privileges, which limits the attack surface to authenticated users within the environment.

Analyst Recommendation

Due to the high severity of this vulnerability, administrators should prioritize the identification of affected ENOVIA instances and apply the necessary vendor patches as soon as they become available. Failure to remediate this issue could result in widespread compromise of user sessions within the collaborative environment.

Description Summary:
A stored Cross-site Scripting (XSS) vulnerability in ENOVIA Specification Manager allows authenticated attackers to execute arbitrary script code in a user's browser session.

Executive Summary:
A stored Cross-site Scripting vulnerability in Dassault Systèmes ENOVIA Specification Manager exposes users to potential session hijacking and malicious script execution.

Vulnerability Details

CVE-ID: CVE-2025-10556

Affected Software: Dassault Systèmes ENOVIA Specification Manager

Affected Versions: Release 3DEXPERIENCE R2023x Golden through R2023x.FP.CFA.2514, Release 3DEXPERIENCE R2024x Golden through R2024x.FP.CFA.2510, Release 3DEXPERIENCE R2025x Golden through R2024x.FP.CFA.2514

Vulnerability: This is a stored Cross-site Scripting (XSS) flaw caused by improper neutralization of user input within the Specification Management module. An attacker with low-level privileges can inject malicious scripts that execute within the context of another user's browser session.

Business Impact

The vulnerability carries a CVSS score of 8.7, reflecting its high potential for impact on confidentiality and integrity. Successful exploitation could allow an attacker to bypass security controls, steal sensitive session tokens, or perform unauthorized actions on behalf of legitimate users, leading to significant data compromise and operational disruption.

Remediation Plan

Immediate Action: Review the official Dassault Systèmes trust center security advisory for patch availability and apply the recommended updates to the affected ENOVIA environments immediately.

Proactive Monitoring: Monitor web application logs for suspicious input patterns or unusual script-like payloads being submitted to the Specification Management module.

Compensating Controls: Deploy or update Web Application Firewall (WAF) rules to detect and block common XSS attack signatures targeting the ENOVIA platform.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of October 14, 2025, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The requirement for low privileges and user interaction slightly limits the attack surface, but the potential for high impact necessitates prompt attention.

Analyst Recommendation

Given the severity of this vulnerability, organizations utilizing the affected versions of ENOVIA Specification Manager should prioritize identifying and patching these systems. Until updates are deployed, restrict user access to the affected module where possible and enforce strict content security policies to mitigate the risk of script execution.

Description Summary:
A stored Cross-site Scripting (XSS) vulnerability in DELMIA Service Process Engineer allows authenticated attackers to execute arbitrary script code within a user's browser session.

Executive Summary:
A stored Cross-site Scripting vulnerability in Dassault Systèmes DELMIA Service Process Engineer poses a risk of unauthorized code execution within user sessions.

Vulnerability Details

CVE-ID: CVE-2025-10555

Affected Software: Dassault Systèmes DELMIA Service Process Engineer

Affected Versions: Release 3DEXPERIENCE R2025x Golden through Release 3DEXPERIENCE R2025x FP.CFA.2514

Vulnerability: This is a stored Cross-site Scripting (CWE-79) vulnerability located within the Service Items Management component. The vulnerability requires the attacker to have low-level authenticated access to the system to trigger the payload.

Business Impact

The exploitation of this vulnerability allows an attacker to execute arbitrary scripts in the context of an authenticated user session. This can lead to the theft of session tokens, unauthorized actions performed on behalf of the user, or the exfiltration of sensitive information, potentially impacting the integrity and confidentiality of the engineering environment. Given the CVSS score of 8.7, this is considered a high-severity risk that demands immediate attention to prevent unauthorized session manipulation.

Remediation Plan

Immediate Action: Review the official Dassault Systèmes security advisory at the provided reference link and apply all relevant security updates or configuration changes recommended by the vendor.

Proactive Monitoring: Monitor application logs for suspicious input patterns within the Service Items Management module, particularly those containing script tags or encoded payloads.

Compensating Controls: Deploy a Web Application Firewall (WAF) configured to detect and block common XSS injection patterns targeting the application endpoints.

Exploitation Status

Public Exploit Available: Unknown.

Analyst Notes: As of November 26, 2025, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw's requirement for user interaction and existing authentication limits the immediate attack surface for unauthenticated actors.

Analyst Recommendation

Organizations utilizing the affected versions of DELMIA Service Process Engineer should prioritize the implementation of vendor-supplied mitigations to neutralize this stored XSS risk. Failure to address this vulnerability could allow malicious actors to compromise user sessions, leading to unauthorized data access or system manipulation. Administrators should verify their current deployment version against the affected range and apply updates as soon as they become available.

Description Summary:
A stored Cross-site Scripting (XSS) vulnerability in ENOVIA Product Manager allows an authenticated attacker to execute arbitrary script code within a victim's browser session.

Executive Summary:
A stored Cross-site Scripting vulnerability in Dassault Systèmes ENOVIA Product Manager exposes users to potential session hijacking and unauthorized actions by allowing the execution of malicious scripts.

Vulnerability Details

CVE-ID: CVE-2025-10554

Affected Software: Dassault Systèmes ENOVIA Product Manager

Affected Versions: Release 3DEXPERIENCE R2023x (Golden through FP.CFA.2505), Release 3DEXPERIENCE R2024x (Golden through FP.CFA.2450), Release 3DEXPERIENCE R2025x (Golden through FP.CFA.2514)

Vulnerability: This is a stored Cross-site Scripting (XSS) vulnerability (CWE-79) residing within the Requirements module. The vulnerability requires the attacker to have low-level authenticated access to the system to inject malicious scripts that execute in the context of other users.

Business Impact

Successful exploitation of this vulnerability allows an attacker to execute unauthorized scripts, which can lead to session hijacking, sensitive data theft, or unauthorized actions performed on behalf of the victim. With a CVSS score of 8.7, this flaw represents a high risk, particularly in environments where ENOVIA manages critical intellectual property or product data.

Remediation Plan

Immediate Action: Review the official security advisory from Dassault Systèmes and apply the identified patches or security updates to the affected ENOVIA releases as soon as they are made available.

Proactive Monitoring: Monitor web application access logs for unusual patterns, such as unexpected script tags or encoded characters being submitted to the Requirements module.

Compensating Controls: Deploy or update Web Application Firewall (WAF) rules to detect and block common XSS attack patterns and script injection attempts targeting the affected application endpoints.

Exploitation Status

Public Exploit Available: No — there is no confirmed public exploit available.

Analyst Notes: As of November 25, 2025, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The requirement for user interaction and authenticated access slightly reduces the immediate risk, but the impact remains significant due to the nature of stored XSS.

Analyst Recommendation

Given the high CVSS severity score, organizations should prioritize patching these specific versions of ENOVIA Product Manager. Administrators must ensure that all users with access to the Requirements module are aware of potential phishing or malicious links while the software remains in an unpatched state.

Description Summary:
A stored XSS vulnerability in DELMIA Factory Resource Manager allows authenticated attackers to execute arbitrary script code within a user's browser session.

Executive Summary:
A high-severity stored Cross-site Scripting vulnerability in Dassault Systèmes DELMIA Factory Resource Manager exposes users to potential session hijacking and unauthorized actions.

Vulnerability Details

CVE-ID: CVE-2025-10553

Affected Software: Dassault Systèmes DELMIA Factory Resource Manager

Affected Versions: Release 3DEXPERIENCE R2023x Golden through R2023x.FP.CFA.2541, R2024x Golden through R2024x.FP.CFA.2537, R2025x Golden through R2025x.FP.CFA.2514

Vulnerability: This is a stored Cross-site Scripting (CWE-79) vulnerability where an authenticated attacker can inject malicious scripts into the application, which then execute in the context of other users' browser sessions.

Business Impact

Successful exploitation allows an attacker to execute arbitrary scripts in the victim's browser, potentially leading to session theft, unauthorized data access, or the performance of actions on behalf of the victim. Given the CVSS score of 8.7, this represents a significant risk to organizational data integrity and user account security, particularly if administrative accounts are targeted.

Remediation Plan

Immediate Action: Review the official security advisory at the Dassault Systèmes Trust Center and apply the latest provided security updates or hotfixes for the affected 3DEXPERIENCE releases.

Proactive Monitoring: Monitor web application logs for suspicious input patterns or script-like characters in fields processed by the Factory Resource Management module.

Compensating Controls: Deploy a Web Application Firewall (WAF) with updated rulesets designed to detect and block common cross-site scripting injection attempts.

Exploitation Status

Public Exploit Available: No (exploit_available: unknown)

Analyst Notes: As of April 2, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The vulnerability requires a low-privilege authenticated user to successfully trigger the malicious script, which limits the attack surface to existing internal users or compromised accounts.

Analyst Recommendation

Organizations utilizing the affected versions of DELMIA Factory Resource Manager should prioritize the application of vendor-supplied patches to remediate this vulnerability. Given the potential for session compromise, administrators should also consider auditing current user sessions and enforcing stricter input validation policies for all web-based interfaces.

Description Summary:
A stored Cross-site Scripting (XSS) vulnerability in 3DSwymer allows authenticated attackers to execute arbitrary script code within a user's browser session.

Executive Summary:
A high-severity stored Cross-site Scripting vulnerability in Dassault Systèmes 3DSwymer poses a significant risk of unauthorized script execution and session compromise.

Vulnerability Details

CVE-ID: CVE-2025-10552

Affected Software: Dassault Systèmes 3DSwymer

Affected Versions: Dassault Systèmes 3DSwymer: Release 3DEXPERIENCE R2025x Golden through Release 3DEXPERIENCE R2025x FP.CFA.2514

Vulnerability: This is a stored Cross-site Scripting (CWE-79) vulnerability where an attacker with low privileges can inject malicious scripts into the application, which are then executed when a victim views the affected content.

Business Impact

Successful exploitation permits an attacker to execute arbitrary JavaScript in the context of an authenticated user's session. This can lead to the theft of session tokens, unauthorized actions performed on behalf of the user, or the exfiltration of sensitive information, potentially resulting in complete account takeover. Given the CVSS score of 8.7, this vulnerability represents a severe risk to organizational data integrity and user privacy.

Remediation Plan

Immediate Action: Review the official Dassault Systèmes security advisory at https://www.3ds.com/trust-center/security/security-advisories/cve-2025-10552 to identify and apply the necessary software updates.

Proactive Monitoring: Monitor web application logs for unusual patterns, such as unexpected script tags or encoded characters being submitted to data fields.

Compensating Controls: Implement a robust Content Security Policy (CSP) and utilize a Web Application Firewall (WAF) to detect and block common XSS payloads before they reach the application.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of October 14, 2025, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw is inherently exploitable by any authenticated user, making it a priority for internal security teams.

Analyst Recommendation

Due to the high CVSS severity and the potential for session hijacking, organizations running the affected versions of 3DSwymer must prioritize the application of vendor-provided patches. Security administrators should verify their current version against the provided range and coordinate an immediate update cycle to neutralize the threat of script injection.

Description Summary:
A stored cross-site scripting (XSS) vulnerability in ENOVIA Collaborative Industry Innovator allows authenticated attackers to execute arbitrary script code within a victim's browser session.

Executive Summary:
A stored cross-site scripting vulnerability in Dassault Systèmes ENOVIA Collaborative Industry Innovator, rated at 8.7 High, poses a significant risk of unauthorized session manipulation and data theft.

Vulnerability Details

CVE-ID: CVE-2025-10551

Affected Software: Dassault Systèmes ENOVIA Collaborative Industry Innovator

Affected Versions: Release 3DEXPERIENCE R2023x Golden through R2023x.FP.CFA.2541, Release 3DEXPERIENCE R2024x Golden through R2024x.FP.CFA.2537, Release 3DEXPERIENCE R2025x Golden through R2025x.FP.CFA.2514

Vulnerability: The flaw is a stored cross-site scripting (CWE-79) vulnerability within the Document Management component. An authenticated user with low privileges can inject malicious scripts that execute in the context of another user's browser session.

Business Impact

The CVSS score of 8.7 reflects the high potential for impact on confidentiality and integrity. Successful exploitation allows an attacker to hijack user sessions, steal sensitive session tokens, or perform unauthorized actions on behalf of authenticated users, potentially leading to a full compromise of document management workflows and sensitive intellectual property.

Remediation Plan

Immediate Action: Review the official security advisory from Dassault Systèmes to identify and apply the specific patches or configuration changes required for your version of the 3DEXPERIENCE platform.

Proactive Monitoring: Monitor web application logs for suspicious script injections or unusual patterns in document metadata fields that could indicate an attempt to store malicious payloads.

Compensating Controls: Deploy or tune a Web Application Firewall (WAF) to detect and block common XSS patterns in HTTP requests directed at the Document Management module.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of April 2, 2026, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw requires the attacker to be authenticated, which limits the attack surface to existing users.

Analyst Recommendation

Given the high CVSS severity and the nature of XSS in collaborative industry environments, organizations should prioritize patching as soon as the vendor provides the necessary updates. Until patches are applied, administrators should enforce strict access controls and minimize the number of users with privileges to modify document metadata.

Description Summary:
An out-of-bounds read vulnerability in the JT file parsing procedure of SOLIDWORKS eDrawings allows for potential arbitrary code execution when processing a malicious file.

Executive Summary:
A critical out-of-bounds read vulnerability in SOLIDWORKS eDrawings could allow an unauthenticated attacker to execute arbitrary code by convincing a user to open a specially crafted JT file.

Vulnerability Details

CVE-ID: CVE-2025-0831

Affected Software: Dassault Systèmes SOLIDWORKS eDrawings

Affected Versions: Release SOLIDWORKS Desktop 2025 SP0 through Release SOLIDWORKS Desktop 2025 SP2

Vulnerability: This is an out-of-bounds read vulnerability (CWE-125) occurring during the parsing of JT files. An attacker can trigger this flaw by providing a specially crafted file to an unsuspecting user, potentially leading to arbitrary code execution within the context of the application.

Business Impact

The vulnerability carries a CVSS score of 7.8, reflecting its high potential for impact on confidentiality, integrity, and availability. Successful exploitation enables an attacker to execute code with the privileges of the logged-in user, which could result in complete system compromise, unauthorized data exfiltration, or the installation of persistent threats within the engineering environment.

Remediation Plan

Immediate Action: Users must update to the latest patched version of SOLIDWORKS eDrawings as provided by Dassault Systèmes in their official security advisory.

Proactive Monitoring: Security teams should monitor endpoint logs for unexpected process execution or abnormal behavior originating from the eDrawings application when handling external JT files.

Compensating Controls: Implement strict file-handling policies that restrict the opening of untrusted or externally sourced JT files until the software has been updated.

Exploitation Status

Public Exploit Available: exploit_available (unknown)

Analyst Notes: As of July 16, 2025, there is no public information indicating active exploitation or a public proof-of-concept for this vulnerability. The flaw requires user interaction, as it is triggered by the manual opening of a malformed file, which somewhat limits the attack surface compared to network-based remote code execution.

Analyst Recommendation

Given the potential for arbitrary code execution, this vulnerability poses a significant risk to design and engineering workstations. Organizations should prioritize the deployment of vendor-supplied patches to all affected SOLIDWORKS Desktop 2025 installations immediately to eliminate the underlying memory corruption risk.