Vulnerabilities (CVE)

Filtered by vendor 3ds Subscribe
Filtered by product 3dexperience
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-1997 1 3ds 1 3dexperience 2023-12-10 N/A 8.8 HIGH
An OS Command Injection vulnerability exists in SIMULIA 3DOrchestrate from Release 3DEXPERIENCE R2021x through Release 3DEXPERIENCE R2023x. A specially crafted HTTP request can lead to arbitrary command execution.
CVE-2023-1996 1 3ds 1 3dexperience 2023-12-10 N/A 6.1 MEDIUM
A reflected Cross-site Scripting (XSS) vulnerability in Release 3DEXPERIENCE R2018x through Release 3DEXPERIENCE R2023x allows an attacker to execute arbitrary script code.