CVE Intelligence

Dassault Systèmes vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Dassault Systèmes products: 38 record(s), with severity, exploitation and fixes.

Tuleap Enterprise Edition 9SOLIDWORKS eDrawings 5DELMIA Apriso 4ENOVIA Collaborative Industry Innovator 33DSwymer 3DELMIA Service Process Engineer 2DELMIA Factory Resource Manager 2Teamwork Cloud - Business Pro Edition 1GEOVIA Geospatial Data Manager 1SIMULIA Execution Engine 1Station Launcher App in 3DEXPERIENCE platform 1BIOVIA Workbook 1SOLIDWORKS Desktop 1Magic Collaboration Studio 1Teamwork Cloud - Enterprise Edition 1Teamwork Cloud - Business Edition 1Teamwork Cloud - Standard Edition 1ENOVIA Product Manager 1ENOVIA Specification Manager 1ENOVIAvpm Web Access 1SOLIDWORKS Visualize 1

Exploited only (KEV) →

CVE-2026-1333 High · 7.8 CWE-457 Feb 16, 2026
Use of Uninitialized Variable vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026
A Use of Uninitialized Variable vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file.
CVE-2026-1284 High · 7.8 CWE-787 Jan 26, 2026
Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026
An Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file.
CVE-2026-1283 High · 7.8 CWE-122 Jan 26, 2026
Heap-based Buffer Overflow vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026
A Heap-based Buffer Overflow vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file.
CVE-2025-12956 Medium · 5.4 CWE-79 Dec 8, 2025
Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x
A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.
CVE-2025-10555 High · 8.7 CWE-79 Nov 24, 2025
Stored Cross-site Scripting (XSS) vulnerability affecting Service Items Management in DELMIA Service Process Engineer on Release 3DEXPERIENCE R2025x
A stored Cross-site Scripting (XSS) vulnerability affecting Service Items Management in DELMIA Service Process Engineer on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.
CVE-2025-10554 Medium · 5.4 CWE-79 Nov 24, 2025
Stored Cross-site Scripting (XSS) vulnerability affecting Requirements in ENOVIA Product Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x
A stored Cross-site Scripting (XSS) vulnerability affecting Requirements in ENOVIA Product Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.
CVE-2025-10558 Medium · 6.1 CWE-79 Oct 13, 2025
Stored Cross-site Scripting (XSS) vulnerability affecting 3DSearch in 3DSwymer on Release 3DEXPERIENCE R2025x
A stored Cross-site Scripting (XSS) vulnerability affecting 3DSearch in 3DSwymer on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.
CVE-2025-10557 Medium · 5.4 CWE-79 Oct 13, 2025
Stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x
A stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.
CVE-2025-10556 Medium · 5.4 CWE-79 Oct 13, 2025
Stored Cross-site Scripting (XSS) vulnerability affecting Specification Management in ENOVIA Specification Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x
A stored Cross-site Scripting (XSS) vulnerability affecting Specification Management in ENOVIA Specification Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.
CVE-2025-10552 Medium · 6.1 CWE-79 Oct 13, 2025
Stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2025x
A stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.
CVE-2025-6205 Critical · 9.1 KEV High · 67 Public exploit CWE-862 Aug 4, 2025
Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability
A missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to gain privileged access to the application.
CVE-2025-6204 High · 8.0 KEV High · 60 Public exploit CWE-94 Aug 4, 2025
Dassault Systèmes DELMIA Apriso Code Injection Vulnerability
An Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to execute arbitrary code.
CVE-2025-5086 Critical · 9.0 KEV High · 64 Public exploit CWE-502 Jun 2, 2025
Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability
A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could lead to a remote code execution.