CVE-2025-10552
HighCVSS 8.7Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
Stored XSS vulnerability in 3DSwym in 3DSwymer on 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script in user's browser session.
Risk Assessment
Potential for session hijacking, content modification, or other malicious actions in the context of the logged-in user.
Recommendation
Apply vendor patches and sanitize input data in the application.
Other vulnerabilities in 3DSwymer
See all- CVE-2026-16279Critical
An Improper Authorization vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x could allow an attacker to gain access to some user accounts.
- CVE-2025-10558High
Stored XSS vulnerability in 3DSearch in 3DSwymer on 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script in user's browser session.
Original NVD description (English source)
A stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS