CVE-2025-4988

Published May 30, 2025

Last updated 2 months ago

CVSS high 8.7

Overview

Description
A stored Cross-site Scripting (XSS) vulnerability affecting Results Analytics in Multidisciplinary Optimization Engineer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
Source
3DS.Information-Security@3ds.com
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
8.7
Impact score
5.8
Exploitability score
2.3
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
Severity
HIGH

Weaknesses

3DS.Information-Security@3ds.com
CWE-79

Social media

Hype score
Not currently trending

  1. [CVE-2025-4988: HIGH] Stored XSS vulnerability in Results Analytics in 3DEXPERIENCE R2022x-R2024x allows attackers to run malicious code on user browsers. Stay vigilant against cyber threats.#cve,CVE-2025-4988,#cybersecurity https://t.co/zN5SnKELIN https://t.co/rockBykmS0

    @CveFindCom

    30 May 2025

    34 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

References

Sources include official advisories and independent security research.