Files
vuln-nvd/data/2026/CVE-2026-5120.json
T

2 lines
2.4 KiB
JSON

{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"BIOVIA Workbook","vendor":"Dassault Systèmes","versions":[{"lessThanOrEqual":"Release 2021 Refresh5","status":"affected","version":"Release 2021 Golden","versionType":"custom"},{"lessThanOrEqual":"Release 2022 Refresh5","status":"affected","version":"Release 2022 Golden","versionType":"custom"},{"lessThanOrEqual":"Release 2023 Refresh4","status":"affected","version":"Release 2023 Golden","versionType":"custom"},{"lessThanOrEqual":"Release 2024 Refresh4","status":"affected","version":"Release 2024 Golden","versionType":"custom"},{"lessThanOrEqual":"Release 2025 Refresh3","status":"affected","version":"Release 2025 Golden","versionType":"custom"},{"status":"affected","version":"Release 2026 Golden"}]}],"source":"3DS.Information-Security@3ds.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A Race Condition vulnerability affecting BIOVIA Workbook from Release 2021 through Release 2026 could allow a user to access unauthorized data from another user."},{"lang":"es","value":"Una vulnerabilidad de condición de carrera que afecta a BIOVIA Workbook desde la versión 2021 hasta la versión 2026 podría permitir a un usuario acceder a datos no autorizados de otro usuario."}],"id":"CVE-2026-5120","lastModified":"2026-10-25T17:10:00.197","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":8.1,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.2,"source":"3DS.Information-Security@3ds.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-5120","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2026-07-01T13:36:29.119803Z","version":"2.0.3"}}]},"published":"2026-07-01T13:17:48.033","references":[{"source":"3DS.Information-Security@3ds.com","url":"https://www.3ds.com/trust-center/security/security-advisories/cve-2026-5120"}],"sourceIdentifier":"3DS.Information-Security@3ds.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-362"}],"source":"3DS.Information-Security@3ds.com","type":"Secondary"}]}