CVE-2025-4983

HIGH

Dassault Systmes City Referential Manager Release 3DEXPERIENCE R2025x - Stored Cross-Site Scripting

Title source: llm

Description

A stored Cross-site Scripting (XSS) vulnerability affecting City Referential in City Referential Manager on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.

References (1)

Core 1

Core References

Various Sources

https://www.3ds.com/vulnerability/advisories

Scores

CVSS v3 8.7

EPSS 0.0027

EPSS Percentile 18.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-79

Status published

Products (1)

Dassault Systèmes/City Referential Manager Release 3DEXPERIENCE R2025x Golden

Published May 30, 2025

Tracked Since Feb 18, 2026