High severity8.7NVD Advisory· Published Dec 16, 2024· Updated Jun 17, 2026

CVE-2024-12092

Description

A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3DEXPERIENCE/ENOVIA Collaborative Industry Innovatorllm-fuzzy
Range: R2024x
3ds.com/3DEXPERIENCEllm-fuzzy
Range: R2024x
Dassault Systèmes/ENOVIA Collaborative Industry Innovatorcpe-rescue
Range: Release 3DEXPERIENCE R2024x Golden

Patches

Vulnerability mechanics

References

www.3ds.com/vulnerability/advisoriesnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.565
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000