CVE-2025-12956

HighCVSS 8.7

Published: 08/12/2025(UTC)Updated: 07/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.19%

8th percentile - higher than 8% of all known CVEs

Summary

A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.

Risk Assessment

The risk is the potential for malicious script execution in the user's browser, which could lead to data theft, session hijacking, or other attacks.

Recommendation

Update ENOVIA Collaborative Industry Innovator to the latest patched version and apply input filtering.

Other vulnerabilities in ENOVIA Collaborative Industry Innovator

CVE-2025-10557High
Stored XSS vulnerability in Issue Management in ENOVIA Collaborative Industry Innovator (3DEXPERIENCE R2022x through R2025x) allows an attacker to execute arbitrary script in user's browser session.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS