Filtered by vendor 3ds
Subscriptions
Total
28 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2023-2139 | 1 3ds | 1 Delmia Apriso | 2024-08-02 | 5.4 Medium |
A reflected Cross-site Scripting (XSS) Vulnerability in DELMIA Apriso Release 2017 through Release 2022 allows an attacker to execute arbitrary script code. | ||||
CVE-2023-2141 | 1 3ds | 1 Delmia Apriso | 2024-08-02 | 8.5 High |
An unsafe .NET object deserialization in DELMIA Apriso Release 2017 through Release 2022 could lead to post-authentication remote code execution. | ||||
CVE-2023-2140 | 1 3ds | 1 Delmia Apriso | 2024-08-02 | 7.5 High |
A Server-Side Request Forgery vulnerability in DELMIA Apriso Release 2017 through Release 2022 could allow an unauthenticated attacker to issue requests to arbitrary hosts on behalf of the server running the DELMIA Apriso application. | ||||
CVE-2023-1997 | 1 3ds | 1 3dexperience | 2024-08-02 | 8.8 High |
An OS Command Injection vulnerability exists in SIMULIA 3DOrchestrate from Release 3DEXPERIENCE R2021x through Release 3DEXPERIENCE R2023x. A specially crafted HTTP request can lead to arbitrary command execution. | ||||
CVE-2023-1996 | 1 3ds | 1 3dexperience | 2024-08-02 | 6.1 Medium |
A reflected Cross-site Scripting (XSS) vulnerability in Release 3DEXPERIENCE R2018x through Release 3DEXPERIENCE R2023x allows an attacker to execute arbitrary script code. | ||||
CVE-2023-1287 | 1 3ds | 1 Enovia Live Collaboration | 2024-08-02 | 9 Critical |
An XSL template vulnerability in ENOVIA Live Collaboration V6R2013xE allows Remote Code Execution. | ||||
CVE-2023-1288 | 1 3ds | 1 Enovia Live Collaboration | 2024-08-02 | 6.8 Medium |
An XML External Entity injection (XXE) vulnerability in ENOVIA Live Collaboration V6R2013xE allows an attacker to read local files on the server. | ||||
CVE-2024-0935 | 1 3ds | 1 Delmia Apriso | 2024-08-01 | 4.4 Medium |
Insertion of Sensitive Information into Log File vulnerabilities are affecting DELMIA Apriso Release 2019 through Release 2024 |