- Description
- A stored Cross-site Scripting (XSS) vulnerability affecting Meeting Management in ENOVIA Change Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
- Source
- 3DS.Information-Security@3ds.com
- NVD status
- Received
CVSS 3.1
- Type
- Secondary
- Base score
- 8.7
- Impact score
- 5.8
- Exploitability score
- 2.3
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
- Severity
- HIGH
- 3DS.Information-Security@3ds.com
- CWE-79
- Hype score
- Not currently trending
New post from https://t.co/uXvPWJy6tj (CVE-2025-0830 | Dassault Systèmes ENOVIA Change Manager cross site scripting) has been published on https://t.co/ZA5qFwotHO
@WolfgangSesin
17 Mar 2025
23 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-0830 A stored Cross-site Scripting (XSS) vulnerability affecting Meeting Management in ENOVIA Change Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2… https://t.co/z8zYiCuULL
@CVEnew
17 Mar 2025
259 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
[CVE-2025-0830: HIGH] Stored XSS vulnerability in ENOVIA Change Manager (R2022x-R2024x) allows attackers to run script code in user browsers. Ensure system security updates are in place.#cybersecurity,#vulnerability https://t.co/QiBIMyicZC https://t.co/MCkVLhydg1
@CveFindCom
17 Mar 2025
8 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes