What’s Vulnerable › Vulnerabilities

CVE-2023-5599: Stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2023x

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-11-21 · updated 2026-06-17
• Weakness: CWE-79

Description

A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2023x allows an attacker to execute arbitrary script code.

Affected products

• Dassault 3Dswymer 3Dexperience 2022: fp.cfa.2337
• Dassault 3Dswymer 3Dexperience 2023: fp.cfa.2333

References

• https://www.3ds.com/vulnerability/advisories
• https://www.3ds.com/vulnerability/advisories

Get alerted when CVE-2023-5599 or the next vulnerability affects your stack