3dexperience enovia vulnerabilities and fixes

Recent CVEs affecting 3dexperience enovia, with upgrade or downgrade steps. 22 tracked.

Also searched as: 3dexperienceenovia.

3dexperience enovia has 22 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 14. Most recent: 2025-12-08. Highest priority: CVE-2024-12089 (score 39/100).

• CVE-2025-10554 HIGH 8.7 UPGRADE A stored Cross-site Scripting (XSS) vulnerability affecting Requirements in ENOVIA Product Manager from Releas
• CVE-2025-10556 HIGH 8.7 UPGRADE A stored Cross-site Scripting (XSS) vulnerability affecting Specification Management in ENOVIA Specification M
• CVE-2025-10557 HIGH 8.7 UPGRADE A stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry
• CVE-2025-12956 HIGH 8.7 UPGRADE A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Re
• CVE-2025-0833 HIGH 8.7 DOWNGRADE A stored Cross-site Scripting (XSS) vulnerability affecting Route Management in ENOVIA Collaborative Industry
• CVE-2025-0832 HIGH 8.7 UPGRADE A stored Cross-site Scripting (XSS) vulnerability affecting Project Gantt in ENOVIA Collaborative Industry Inn
• CVE-2025-0830 HIGH 8.7 UPGRADE A stored Cross-site Scripting (XSS) vulnerability affecting Meeting Management in ENOVIA Change Manager from R
• CVE-2025-0829 HIGH 8.7 UPGRADE A stored Cross-site Scripting (XSS) vulnerability affecting 3D Markup in ENOVIA Collaborative Industry Innovat
• CVE-2025-0828 HIGH 8.7 UPGRADE A stored Cross-site Scripting (XSS) vulnerability affecting Engineering Release in ENOVIA Product Engineering
• CVE-2025-0826 HIGH 8.7 UPGRADE A stored Cross-site Scripting (XSS) vulnerability affecting 3D Navigate in ENOVIA Collaborative Industry Innov
• CVE-2025-0601 HIGH 8.7 UPGRADE A stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry
• CVE-2025-0600 HIGH 8.7 DOWNGRADE A stored Cross-site Scripting (XSS) vulnerability affecting Product Explorer in ENOVIA Collaborative Industry
• CVE-2025-0599 HIGH 8.7 DOWNGRADE A stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Indust
• CVE-2025-0598 HIGH 8.7 DOWNGRADE A stored Cross-site Scripting (XSS) vulnerability affecting Relations in ENOVIA Collaborative Industry Innovat
• CVE-2025-0596 HIGH 8.7 DOWNGRADE A stored Cross-site Scripting (XSS) vulnerability affecting Bookmark Editor in ENOVIA Collaborative Industry I
• CVE-2024-8004 HIGH 8.7 DOWNGRADE A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Relea
• CVE-2024-7736 HIGH 8.7 UPGRADE A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Re
• CVE-2024-6380 HIGH 8.7 UPGRADE A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Re
• CVE-2024-12092 HIGH 8.7 DOWNGRADE A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator on Release
• CVE-2024-12091 HIGH 8.7 UPGRADE A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Relea
• CVE-2024-12090 HIGH 8.7 DOWNGRADE A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator on Release
• CVE-2024-12089 HIGH 8.7 UPGRADE A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Relea

FAQ

How do I fix 3dexperience enovia vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is 3dexperience enovia being exploited right now?

None of the tracked 3dexperience enovia CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which 3dexperience enovia CVE should I patch first?

CVE-2024-12089 currently ranks highest (39/100): A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Relea.

RSS feed for 3dexperience enovia · ← Back to latest CVEs