2 lines
2.4 KiB
JSON
2 lines
2.4 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Product Manager","vendor":"Dassault Systèmes","versions":[{"lessThanOrEqual":"Release 3DEXPERIENCE R2022x.FP.CFA.2513","status":"affected","version":"Release 3DEXPERIENCE R2022x Golden","versionType":"custom"},{"lessThanOrEqual":"Release 3DEXPERIENCE R2023x.FP.CFA.2505","status":"affected","version":"Release 3DEXPERIENCE R2023x Golden","versionType":"custom"},{"lessThanOrEqual":"Release 3DEXPERIENCE R2024x.FP.CFA.2450","status":"affected","version":"Release 3DEXPERIENCE R2024x Golden","versionType":"custom"},{"status":"affected","version":"Release 3DEXPERIENCE R2025x Golden"}]}],"source":"3DS.Information-Security@3ds.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A stored Cross-site Scripting (XSS) vulnerability affecting Requirements in Product Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session."},{"lang":"es","value":"Una vulnerabilidad de Cross-site Scripting (XSS) Almacenado que afecta a Requirements en Product Manager desde la versión 3DEXPERIENCE R2022x hasta la versión 3DEXPERIENCE R2025x permite que un atacante ejecute código de script arbitrario en la sesión del navegador del usuario."}],"id":"CVE-2025-4989","lastModified":"2026-06-17T09:34:26.870","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.7,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":2.3,"impactScore":5.8,"source":"3DS.Information-Security@3ds.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-4989","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-05-30T14:38:58.919251Z","version":"2.0.3"}}]},"published":"2025-05-30T15:15:42.437","references":[{"source":"3DS.Information-Security@3ds.com","url":"https://www.3ds.com/vulnerability/advisories"}],"sourceIdentifier":"3DS.Information-Security@3ds.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-79"}],"source":"3DS.Information-Security@3ds.com","type":"Secondary"}]}
|