CVE-2025-10557

HighCVSS 8.7

Published: 13/10/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.20%

9th percentile - higher than 9% of all known CVEs

Summary

Stored XSS vulnerability in Issue Management in ENOVIA Collaborative Industry Innovator (3DEXPERIENCE R2022x through R2025x) allows an attacker to execute arbitrary script in user's browser session.

Risk Assessment

Potential for session hijacking, data modification, or other malicious actions in the context of the logged-in user.

Recommendation

Apply vendor patches and sanitize input data in the application.

Other vulnerabilities in ENOVIA Collaborative Industry Innovator

CVE-2025-12956High
A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.

Original NVD description (English source)

A stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS