# cve.now: Dassault Systèmes The newest entries naming Dassault Systèmes as an affected vendor (up to 200), of 113 in all, 3 known exploited. Older ones are in the full catalog at https://cve.now/latest.md. - [CVE-2026-105412](https://cve.now/CVE-2026-105412.md): SQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5 (CVSS 7.1) - [CVE-2026-105411](https://cve.now/CVE-2026-105411.md): Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 (CVSS 8.1) - [CVE-2026-105410](https://cve.now/CVE-2026-105410.md): Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 (CVSS 8.7) - [CVE-2026-105409](https://cve.now/CVE-2026-105409.md): Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 (CVSS 8.7) - [CVE-2026-105408](https://cve.now/CVE-2026-105408.md): Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 (CVSS 8.7) - [CVE-2026-105407](https://cve.now/CVE-2026-105407.md): OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 (CVSS 8.8) - [CVE-2026-84154](https://cve.now/CVE-2026-84154.md): Code Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x (CVSS 9.9) - [CVE-2026-84285](https://cve.now/CVE-2026-84285.md): OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.3 through 17.5 (CVSS 8.8) - [CVE-2026-16279](https://cve.now/CVE-2026-16279.md): Improper Authorization vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x (CVSS 9.3) - [CVE-2026-19851](https://cve.now/CVE-2026-19851.md): Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 (CVSS 7.7) - [CVE-2026-17061](https://cve.now/CVE-2026-17061.md): Deserialization of Untrusted Data Vulnerability in SIMULIA Execution Engine from Release 2023 through Release 2026 (CVSS 10.0) - [CVE-2026-11756](https://cve.now/CVE-2026-11756.md): Deserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x (CVSS 10.0) - [CVE-2026-14165](https://cve.now/CVE-2026-14165.md): Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 (CVSS 7.5) - [CVE-2026-9695](https://cve.now/CVE-2026-9695.md): Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026 (CVSS 9.8) - [CVE-2026-5120](https://cve.now/CVE-2026-5120.md): Race Condition vulnerability affecting BIOVIA Workbook from Release 2021 through Release 2026 (CVSS 8.1) - [CVE-2026-10094](https://cve.now/CVE-2026-10094.md): Path Traversal vulnerability affecting SOLIDWORKS Visualize from SOLIDWORKS Desktop Release 2024 through SOLIDWORKS Desktop Release 2026 (CVSS 9.8) - [CVE-2026-9024](https://cve.now/CVE-2026-9024.md): Stored Cross-site Scripting (XSS) vulnerability affecting Process Experience Studio in DELMIA Service Process Engineer from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x (CVSS 8.7) - [CVE-2026-7858](https://cve.now/CVE-2026-7858.md): Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x through CATIA Magic Release 2026x (CVSS 9.8) - [CVE-2025-10559](https://cve.now/CVE-2025-10559.md): Path Traversal vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x (CVSS 7.1) - [CVE-2025-10553](https://cve.now/CVE-2025-10553.md): Stored Cross-site Scripting (XSS) vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x (CVSS 8.7) - [CVE-2025-10551](https://cve.now/CVE-2025-10551.md): Stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x (CVSS 8.7) - [CVE-2026-3476](https://cve.now/CVE-2026-3476.md): Code Injection vulnerability affecting SOLIDWORKS Desktop from Release 2025 through Release 2026 (CVSS 7.8) - [CVE-2026-2101](https://cve.now/CVE-2026-2101.md): Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIAvpm Web Access from ENOVIAvpm Version 1 Release 16 through ENOVIAvpm Version 1 Release 19 (CVSS 8.7) - [CVE-2026-1335](https://cve.now/CVE-2026-1335.md): Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 (CVSS 7.8) - [CVE-2026-1334](https://cve.now/CVE-2026-1334.md): Out-Of-Bounds Read vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 (CVSS 7.8) - [CVE-2026-1333](https://cve.now/CVE-2026-1333.md): Use of Uninitialized Variable vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 (CVSS 7.8) - [CVE-2026-1284](https://cve.now/CVE-2026-1284.md): Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 (CVSS 7.8) - [CVE-2026-1283](https://cve.now/CVE-2026-1283.md): Heap-based Buffer Overflow vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 (CVSS 7.8) - [CVE-2025-12956](https://cve.now/CVE-2025-12956.md): Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x (CVSS 8.7) - [CVE-2025-10555](https://cve.now/CVE-2025-10555.md): Stored Cross-site Scripting (XSS) vulnerability affecting Service Items Management in DELMIA Service Process Engineer on Release 3DEXPERIENCE R2025x (CVSS 8.7) - [CVE-2025-10554](https://cve.now/CVE-2025-10554.md): Stored Cross-site Scripting (XSS) vulnerability affecting Requirements in ENOVIA Product Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x (CVSS 8.7) - [CVE-2025-10558](https://cve.now/CVE-2025-10558.md): Stored Cross-site Scripting (XSS) vulnerability affecting 3DSearch in 3DSwymer on Release 3DEXPERIENCE R2025x (CVSS 8.7) - [CVE-2025-10557](https://cve.now/CVE-2025-10557.md): Stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x (CVSS 8.7) - [CVE-2025-10556](https://cve.now/CVE-2025-10556.md): Stored Cross-site Scripting (XSS) vulnerability affecting Specification Management in ENOVIA Specification Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x (CVSS 8.7) - [CVE-2025-10552](https://cve.now/CVE-2025-10552.md): Stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2025x (CVSS 8.7) - [CVE-2025-9976](https://cve.now/CVE-2025-9976.md): OS Command Injection vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x (CVSS 9.0) - [CVE-2025-9450](https://cve.now/CVE-2025-9450.md): Use of Uninitialized Variable vulnerability affecting the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 (CVSS 7.8) - [CVE-2025-9449](https://cve.now/CVE-2025-9449.md): Use After Free vulnerability affecting the PAR file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 (CVSS 7.8) - [CVE-2025-9447](https://cve.now/CVE-2025-9447.md): Out-Of-Bounds Read affecting the PAR file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 (CVSS 7.8) - [CVE-2025-6205](https://cve.now/CVE-2025-6205.md): Missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 (CVSS 9.1, KEV) - [CVE-2025-6204](https://cve.now/CVE-2025-6204.md): Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 (CVSS 8.0, KEV) - [CVE-2025-7042](https://cve.now/CVE-2025-7042.md): Use After Free vulnerability exists in the IPT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 (CVSS 7.8) - [CVE-2025-6974](https://cve.now/CVE-2025-6974.md): Use of Uninitialized Variable vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 (CVSS 7.8) - [CVE-2025-6973](https://cve.now/CVE-2025-6973.md): Use After Free vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 (CVSS 7.8) - [CVE-2025-6972](https://cve.now/CVE-2025-6972.md): Use After Free vulnerability exists in the CATPRODUCT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 (CVSS 7.8) - [CVE-2025-6971](https://cve.now/CVE-2025-6971.md): Use After Free vulnerability exists in the CATPRODUCT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 (CVSS 7.8) - [CVE-2025-0831](https://cve.now/CVE-2025-0831.md): Out-Of-Bounds Read vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 (CVSS 7.8) - [CVE-2025-4987](https://cve.now/CVE-2025-4987.md): Stored Cross-site Scripting (XSS) vulnerability affecting Opportunity Management in Project Portfolio Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x (CVSS 8.7) - [CVE-2025-5086](https://cve.now/CVE-2025-5086.md): Deserialization of Untrusted Data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 (CVSS 9.0, KEV) - [CVE-2025-0602](https://cve.now/CVE-2025-0602.md): Stored Cross-site Scripting (XSS) vulnerability affecting Compare in Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x (CVSS 8.7) - [CVE-2025-4983](https://cve.now/CVE-2025-4983.md): Stored Cross-site Scripting (XSS) vulnerability affecting City Referential in City Referential Manager on Release 3DEXPERIENCE R2025x (CVSS 8.7) - [CVE-2025-4984](https://cve.now/CVE-2025-4984.md): Stored Cross-site Scripting (XSS) vulnerability affecting City Discover in City Referential Manager on Release 3DEXPERIENCE R2025x (CVSS 8.7) - [CVE-2025-4985](https://cve.now/CVE-2025-4985.md): Stored Cross-site Scripting (XSS) vulnerability affecting Risk Management in Project Portfolio Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x (CVSS 8.7) - [CVE-2025-4986](https://cve.now/CVE-2025-4986.md): Stored Cross-site Scripting (XSS) vulnerability affecting Model Definition in Product Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x (CVSS 8.7) - [CVE-2025-4988](https://cve.now/CVE-2025-4988.md): Stored Cross-site Scripting (XSS) vulnerability affecting Results Analytics in Multidisciplinary Optimization Engineer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x (CVSS 8.7) - [CVE-2025-4989](https://cve.now/CVE-2025-4989.md): Stored Cross-site Scripting (XSS) vulnerability affecting Requirements in Product Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x (CVSS 8.7) - [CVE-2025-4990](https://cve.now/CVE-2025-4990.md): Stored Cross-site Scripting (XSS) vulnerability affecting Change Governance in Product Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x (CVSS 8.7) - [CVE-2025-4991](https://cve.now/CVE-2025-4991.md): Stored Cross-site Scripting (XSS) vulnerability affecting 3D Markup in Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x (CVSS 8.7) - [CVE-2025-4992](https://cve.now/CVE-2025-4992.md): Stored Cross-site Scripting (XSS) vulnerability affecting Service Items Management in Service Process Engineer from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2025x (CVSS 8.7) - [CVE-2025-1884](https://cve.now/CVE-2025-1884.md): Use-After-Free vulnerability exists in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 (CVSS 7.8) - [CVE-2025-1883](https://cve.now/CVE-2025-1883.md): Out-Of-Bounds Write vulnerability exists in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 (CVSS 7.8) - [CVE-2025-0833](https://cve.now/CVE-2025-0833.md): Stored Cross-site Scripting (XSS) vulnerability affecting Route Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x (CVSS 8.7) - [CVE-2025-0832](https://cve.now/CVE-2025-0832.md): Stored Cross-site Scripting (XSS) vulnerability affecting Project Gantt in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x (CVSS 8.7) - [CVE-2025-0830](https://cve.now/CVE-2025-0830.md): Stored Cross-site Scripting (XSS) vulnerability affecting Meeting Management in ENOVIA Change Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x (CVSS 8.7) - [CVE-2025-0829](https://cve.now/CVE-2025-0829.md): Stored Cross-site Scripting (XSS) vulnerability affecting 3D Markup in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x (CVSS 8.7) - [CVE-2025-0828](https://cve.now/CVE-2025-0828.md): Stored Cross-site Scripting (XSS) vulnerability affecting Engineering Release in ENOVIA Product Engineering Specialist from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x (CVSS 8.7) - [CVE-2025-0827](https://cve.now/CVE-2025-0827.md): Stored Cross-site Scripting (XSS) vulnerability affecting 3DPlay in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x (CVSS 8.7) - [CVE-2025-0826](https://cve.now/CVE-2025-0826.md): Stored Cross-site Scripting (XSS) vulnerability affecting 3D Navigate in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x (CVSS 8.7) - [CVE-2025-0601](https://cve.now/CVE-2025-0601.md): Stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x (CVSS 8.7) - [CVE-2025-0600](https://cve.now/CVE-2025-0600.md): Stored Cross-site Scripting (XSS) vulnerability affecting Product Explorer in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x (CVSS 8.7) - [CVE-2025-0599](https://cve.now/CVE-2025-0599.md): Stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x (CVSS 8.7) - [CVE-2025-0598](https://cve.now/CVE-2025-0598.md): Stored Cross-site Scripting (XSS) vulnerability affecting Relations in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x (CVSS 8.7) - [CVE-2025-0596](https://cve.now/CVE-2025-0596.md): Stored Cross-site Scripting (XSS) vulnerability affecting Bookmark Editor in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x (CVSS 8.7) - [CVE-2025-0595](https://cve.now/CVE-2025-0595.md): Stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x (CVSS 8.7) - [CVE-2024-12092](https://cve.now/CVE-2024-12092.md): Stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x (CVSS 8.7) - [CVE-2024-12091](https://cve.now/CVE-2024-12091.md): Stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x (CVSS 8.7) - [CVE-2024-12090](https://cve.now/CVE-2024-12090.md): Stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x (CVSS 8.7) - [CVE-2024-12089](https://cve.now/CVE-2024-12089.md): Stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x (CVSS 8.7) - [CVE-2024-10204](https://cve.now/CVE-2024-10204.md): Heap-based Buffer Overflow and Uninitialized Variable vulnerabilities exist in eDrawings from Release SOLIDWORKS 2024 through Release SOLIDWORKS 2025 (CVSS 7.8) - [CVE-2024-8040](https://cve.now/CVE-2024-8040.md): Authorization Bypass Through User-Controlled Key vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2024x (CVSS 7.7) - [CVE-2024-6380](https://cve.now/CVE-2024-6380.md): Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x (CVSS 8.7) - [CVE-2024-7737](https://cve.now/CVE-2024-7737.md): Stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x (CVSS 8.7) - [CVE-2024-7736](https://cve.now/CVE-2024-7736.md): Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x (CVSS 8.7) - [CVE-2024-8004](https://cve.now/CVE-2024-8004.md): Stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x (CVSS 8.7) - [CVE-2024-7939](https://cve.now/CVE-2024-7939.md): Stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2024x (CVSS 8.7) - [CVE-2024-7938](https://cve.now/CVE-2024-7938.md): Stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x (CVSS 8.7) - [CVE-2024-7932](https://cve.now/CVE-2024-7932.md): Stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer on Release 3DEXPERIENCE R2024x (CVSS 8.7) - [CVE-2024-6377](https://cve.now/CVE-2024-6377.md): URL redirection to untrusted site (open redirect) vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x (CVSS 8.1) - [CVE-2024-6378](https://cve.now/CVE-2024-6378.md): Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x (CVSS 8.7) - [CVE-2024-6379](https://cve.now/CVE-2024-6379.md): Reflected Cross-site Scripting (XSS) vulnerability affecting 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x (CVSS 7.7) - [CVE-2024-3300](https://cve.now/CVE-2024-3300.md): Pre-authentication Unsafe .NET object deserialization vulnerability affecting DELMIA Apriso Release 2019 through Release 2024 (CVSS 9.0) - [CVE-2024-3301](https://cve.now/CVE-2024-3301.md): Post-authentication Unsafe .NET object deserialization vulnerability affecting DELMIA Apriso Release 2019 through Release 2024 (CVSS 8.5) - [CVE-2023-5597](https://cve.now/CVE-2023-5597.md): Stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x (CVSS 5.4) - [CVE-2024-3299](https://cve.now/CVE-2024-3299.md): Out-Of-Bounds Write, Use of Uninitialized Resource and Use-After-Free vulnerabilities exist in the SLDDRW and SLDPRT file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024 (CVSS 7.8) - [CVE-2024-3298](https://cve.now/CVE-2024-3298.md): Out-Of-Bounds Write and Type Confusion vulnerabilities exist in the DWG and DXF file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024 (CVSS 7.8) - [CVE-2024-1848](https://cve.now/CVE-2024-1848.md): Multiple vulnerabilities exist in file reading procedure in SOLIDWORKS Desktop on Release SOLIDWORKS 2024 (CVSS 7.8) - [CVE-2024-1624](https://cve.now/CVE-2024-1624.md): OS Command Injection vulnerability affecting documentation server on certain Releases of 3DEXPERIENCE, SIMULIA Abaqus, SIMULIA Isight and CATIA Composer (CVSS 9.4) - [CVE-2024-1847](https://cve.now/CVE-2024-1847.md): Multiple vulnerabilities exist in file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024 (CVSS 7.8) - [CVE-2024-0935](https://cve.now/CVE-2024-0935.md): Insertion of Sensitive Information into Log File vulnerabilities affecting DELMIA Apriso Release 2019 through Release 2024 (CVSS 4.4) - [CVE-2023-6078](https://cve.now/CVE-2023-6078.md): OS Command Injection vulnerability affecting BIOVIA Materials Studio products from Release BIOVIA 2021 through Release BIOVIA 2023 (CVSS 8.8) - [CVE-2023-5598](https://cve.now/CVE-2023-5598.md): Stored Cross-site Scripting (XSS) vulnerabilities affecting 3DSwym in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2023x (CVSS 5.4) - [CVE-2023-5599](https://cve.now/CVE-2023-5599.md): Stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2023x (CVSS 5.4) - [CVE-2023-3589](https://cve.now/CVE-2023-3589.md): Cross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x (CVSS 6.8) - [CVE-2023-3588](https://cve.now/CVE-2023-3588.md): Stored Cross-site Scripting (XSS) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x (CVSS 5.4) - [CVE-2023-1997](https://cve.now/CVE-2023-1997.md): OS Command Injection vulnerability affecting SIMULIA 3DOrchestrate from Release 3DEXPERIENCE R2021x through Release 3DEXPERIENCE R2023x (CVSS 8.8) - [CVE-2023-2763](https://cve.now/CVE-2023-2763.md): Use-After-Free, Out-of-bounds Write and Heap-based Buffer Overflow vulnerabilities exist in the DWG and DXF file reading procedure in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023 (CVSS 7.8) - [CVE-2023-2762](https://cve.now/CVE-2023-2762.md): Use-After-Free vulnerability in SLDPRT file reading procedure affecting SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023 (CVSS 7.8) - [CVE-2023-1996](https://cve.now/CVE-2023-1996.md): Reflected Cross-site Scripting (XSS) vulnerability affecting Release 3DEXPERIENCE R2018x through Release 3DEXPERIENCE R2023x (CVSS 6.1) - [CVE-2023-2141](https://cve.now/CVE-2023-2141.md): Unsafe .NET object deserialization affecting DELMIA Apriso Release 2017 through Release 2022 (CVSS 8.5) - [CVE-2023-2140](https://cve.now/CVE-2023-2140.md): Server-Side Request Forgery vulnerability affecting DELMIA Apriso Release 2017 through Release 2022 (CVSS 7.5) - [CVE-2023-2139](https://cve.now/CVE-2023-2139.md): Reflected Cross-site Scripting vulnerability affecting DELMIA Apriso Release 2017 through Release 2022 (CVSS 5.4) - [CVE-2023-1288](https://cve.now/CVE-2023-1288.md): ENOVIA Live Collaboration V6R2013xE is affected by an XML External Entity injection (XXE) vulnerability (CVSS 6.8) - [CVE-2023-1287](https://cve.now/CVE-2023-1287.md): ENOVIA Live Collaboration V6R2013xE is affected by an XSL template injection vulnerability (CVSS 9.0) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/vendors/dassault-syst-mes Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.