CVE-2023-1996

Reflected Cross-site Scripting (XSS) vulnerability affecting Release 3DEXPERIENCE R2018x through Release 3DEXPERIENCE R2023x

State: Published
Severity: 6.1 Medium
Published: May 19, 2023
Updated: Feb 12, 2025
Reserved: Apr 12, 2023

Read the record on cve.org

Description

A reflected Cross-site Scripting (XSS) vulnerability in Release 3DEXPERIENCE R2018x through Release 3DEXPERIENCE R2023x allows an attacker to execute arbitrary script code.

Scores

CVSS	Score	Vector	Source
3.1	6.1 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N	3DS

Weaknesses

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected Products

Product	Versions
3DEXPERIENCEDassault Systèmes	Release 3DEXPERIENCE R2018x - All levelsAffected Release 3DEXPERIENCE R2019x - All levelsAffected Release 3DEXPERIENCE R2020x Golden through Release 3DEXPERIENCE R2020x.FP.CFA.2303Affected Release 3DEXPERIENCE R2021x Golden through Release 3DEXPERIENCE R2021x.FP.CFA.2306Affected Release 3DEXPERIENCE R2022x Golden through Release 3DEXPERIENCE R2022x FP.CFA.2250Affected Release 3DEXPERIENCE R2023x Golden through Release 3DEXPERIENCE R2023x.FP.CFA.2306Affected

Product

Versions

3DEXPERIENCEDassault Systèmes

Release 3DEXPERIENCE R2018x - All levelsAffected
Release 3DEXPERIENCE R2019x - All levelsAffected
Release 3DEXPERIENCE R2020x Golden through Release 3DEXPERIENCE R2020x.FP.CFA.2303Affected
Release 3DEXPERIENCE R2021x Golden through Release 3DEXPERIENCE R2021x.FP.CFA.2306Affected
Release 3DEXPERIENCE R2022x Golden through Release 3DEXPERIENCE R2022x FP.CFA.2250Affected
Release 3DEXPERIENCE R2023x Golden through Release 3DEXPERIENCE R2023x.FP.CFA.2306Affected

References

https://www.3ds.com/vulnerability/advisories

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.