Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2720▼ 598 respecto a la semana anterior

Críticas / altas1299▼ 202 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)299▼ 211 respecto a la semana anterior

51 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-0601	Analizada	Media (5.4)	0.25%	—	3DS 3dexperience Enovia	17/3/2025	17/6/2026	A stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
CVE-2025-0600	Analizada	Media (5.4)	0.25%	—	3DS 3dexperience Enovia	17/3/2025	17/6/2026	A stored Cross-site Scripting (XSS) vulnerability affecting Product Explorer in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
CVE-2025-0599	Analizada	Media (5.4)	0.25%	—	3DS 3dexperience Enovia	17/3/2025	17/6/2026	A stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
CVE-2025-0598	Analizada	Media (5.4)	0.25%	—	3DS 3dexperience Enovia	17/3/2025	17/6/2026	A stored Cross-site Scripting (XSS) vulnerability affecting Relations in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
CVE-2025-0596	Analizada	Media (5.4)	0.25%	—	3DS 3dexperience Enovia	17/3/2025	17/6/2026	A stored Cross-site Scripting (XSS) vulnerability affecting Bookmark Editor in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
CVE-2025-0595	Aplazada	Alta (8.7)	0.32%	—	3dswym 3ddashboard^AI 3DS 3dexperience^AI	17/3/2025	17/6/2026	A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
CVE-2024-12092	Analizada	Media (5.4)	0.34%	—	3DS 3dexperience Enovia	16/12/2024	17/6/2026	A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
CVE-2024-12091	Analizada	Media (5.4)	0.34%	—	3DS 3dexperience Enovia	16/12/2024	17/6/2026	A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
CVE-2024-12090	Analizada	Media (5.4)	0.34%	—	3DS 3dexperience Enovia	16/12/2024	17/6/2026	A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
CVE-2024-12089	Analizada	Media (5.4)	0.42%	—	3DS 3dexperience Enovia	16/12/2024	17/6/2026	A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
CVE-2024-6380	Analizada	Media (5.4)	0.27%	—	3DS 3dexperience Enovia	16/10/2024	17/6/2026	A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
CVE-2024-7736	Analizada	Media (5.4)	0.31%	—	3DS 3dexperience Enovia	19/9/2024	17/6/2026	A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
CVE-2024-8004	Analizada	Media (5.4)	0.31%	—	3DS 3dexperience Enovia	2/9/2024	17/6/2026	A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
CVE-2024-7939	Modificada	Media (5.4)	0.31%	—	3DS 3dexperience	2/9/2024	17/6/2026	A stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
CVE-2024-7938	Analizada	Media (5.4)	0.31%	—	3DS 3dexperience	2/9/2024	17/6/2026	A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
CVE-2024-7932	Modificada	Media (5.4)	0.31%	—	3DS 3dexperience	2/9/2024	17/6/2026	A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
CVE-2024-6379	Modificada	Media (6.1)	0.24%	—	3DS 3dexperience	20/8/2024	17/6/2026	A reflected Cross-site Scripting (XSS) vulnerability affecting 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
CVE-2024-6378	Analizada	Media (5.4)	0.37%	—	3DS 3dexperience	20/8/2024	17/6/2026	A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
CVE-2024-6377	Modificada	Media (6.1)	0.28%	—	3DS 3dexperience	20/8/2024	17/6/2026	An URL redirection to untrusted site (open redirect) vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to redirect users to an arbitrary website via a crafted URL.
CVE-2024-1624	Aplazada	Crítica (9.4)	2.1%	—	Simulia Abaqus^AI Simulia Isight^AI Catia Composer^AI 3DS 3dexperience^AI	1/3/2024	17/6/2026	An OS Command Injection vulnerability affecting documentation server on 3DEXPERIENCE from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x, SIMULIA Abaqus from Release 2022 through Release 2024, SIMULIA Isight from Release 2022 through Release 2024 and CATIA Composer from Release R2023 through Release…
CVE-2023-5599	Modificada	Media (5.4)	0.39%	—	Dassault 3dswymer 3dexperience 2022 Dassault 3dswymer 3dexperience 2023	21/11/2023	17/6/2026	A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2023x allows an attacker to execute arbitrary script code.
CVE-2023-5598	Modificada	Media (5.4)	0.39%	—	Dassault 3dswymer 3dexperience 2022 Dassault 3dswymer 3dexperience 2023	21/11/2023	17/6/2026	Stored Cross-site Scripting (XSS) vulnerabilities affecting 3DSwym in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2023x allow an attacker to execute arbitrary script code.
CVE-2023-1997	Modificada	Alta (8.8)	1.9%	—	3DS 3dexperience	28/8/2023	17/6/2026	An OS Command Injection vulnerability exists in SIMULIA 3DOrchestrate from Release 3DEXPERIENCE R2021x through Release 3DEXPERIENCE R2023x. A specially crafted HTTP request can lead to arbitrary command execution.
CVE-2023-2763	Modificada	Alta (7.8)	0.35%	—	3DS 3dexperience Solidworks	12/7/2023	17/6/2026	Use-After-Free, Out-of-bounds Write and Heap-based Buffer Overflow vulnerabilities exist in the DWG and DXF file reading procedure in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially…
CVE-2023-2762	Modificada	Alta (7.8)	0.36%	—	3DS 3dexperience Solidworks	12/7/2023	17/6/2026	A Use-After-Free vulnerability in SLDPRT file reading procedure exists in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted SLDPRT file.