CVE-2025-10554

8.7 HIGH

Published: November 24, 2025 Modified: November 25, 2025

Description

A stored Cross-site Scripting (XSS) vulnerability affecting Requirements in ENOVIA Product Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

https://www.3ds.com/trust-center/security/security-advisories/cve-2025-10554

Source: 3DS.Information-Security@3ds.com

1 reference(s) from NVD

Quick Stats

CVSS v3 Score

8.7 / 10.0

EPSS (Exploit Probability)

0.0%

11th percentile

Exploitation Status

Not in CISA KEV

Weaknesses (CWE)

CWE-79

Related CVEs