<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: 3dexperience enovia</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-12956: A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Re</title><link>https://patchthecve.com/cve/CVE-2025-12956.html</link><guid>https://patchthecve.com/cve/CVE-2025-12956.html</guid><pubDate>Wed, 07 Oct 2026 20:10:01 +0000</pubDate><description>HIGH 8.7: A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user&#x27;s browser session.</description></item><item><title>CVE-2025-10554: A stored Cross-site Scripting (XSS) vulnerability affecting Requirements in ENOVIA Product Manager from Releas</title><link>https://patchthecve.com/cve/CVE-2025-10554.html</link><guid>https://patchthecve.com/cve/CVE-2025-10554.html</guid><pubDate>Sun, 18 Oct 2026 20:10:00 +0000</pubDate><description>HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting Requirements in ENOVIA Product Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user&#x27;s browser session.</description></item><item><title>CVE-2025-10557: A stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry </title><link>https://patchthecve.com/cve/CVE-2025-10557.html</link><guid>https://patchthecve.com/cve/CVE-2025-10557.html</guid><pubDate>Thu, 08 Oct 2026 12:10:00 +0000</pubDate><description>HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user&#x27;s browser session.</description></item><item><title>CVE-2025-10556: A stored Cross-site Scripting (XSS) vulnerability affecting Specification Management in ENOVIA Specification M</title><link>https://patchthecve.com/cve/CVE-2025-10556.html</link><guid>https://patchthecve.com/cve/CVE-2025-10556.html</guid><pubDate>Thu, 08 Oct 2026 12:10:00 +0000</pubDate><description>HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting Specification Management in ENOVIA Specification Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user&#x27;s browser session.</description></item><item><title>CVE-2025-0833: A stored Cross-site Scripting (XSS) vulnerability affecting Route Management in ENOVIA Collaborative Industry </title><link>https://patchthecve.com/cve/CVE-2025-0833.html</link><guid>https://patchthecve.com/cve/CVE-2025-0833.html</guid><pubDate>Wed, 17 Jun 2026 08:27:13 +0000</pubDate><description>HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting Route Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user&#x27;s browser session.</description></item><item><title>CVE-2025-0832: A stored Cross-site Scripting (XSS) vulnerability affecting Project Gantt in ENOVIA Collaborative Industry Inn</title><link>https://patchthecve.com/cve/CVE-2025-0832.html</link><guid>https://patchthecve.com/cve/CVE-2025-0832.html</guid><pubDate>Wed, 17 Jun 2026 08:27:13 +0000</pubDate><description>HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting Project Gantt in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user&#x27;s browser session.</description></item><item><title>CVE-2025-0830: A stored Cross-site Scripting (XSS) vulnerability affecting Meeting Management in ENOVIA Change Manager from R</title><link>https://patchthecve.com/cve/CVE-2025-0830.html</link><guid>https://patchthecve.com/cve/CVE-2025-0830.html</guid><pubDate>Wed, 17 Jun 2026 08:27:13 +0000</pubDate><description>HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting Meeting Management in ENOVIA Change Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user&#x27;s browser session.</description></item><item><title>CVE-2025-0829: A stored Cross-site Scripting (XSS) vulnerability affecting 3D Markup in ENOVIA Collaborative Industry Innovat</title><link>https://patchthecve.com/cve/CVE-2025-0829.html</link><guid>https://patchthecve.com/cve/CVE-2025-0829.html</guid><pubDate>Wed, 17 Jun 2026 08:27:12 +0000</pubDate><description>HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting 3D Markup in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user&#x27;s browser session.</description></item><item><title>CVE-2025-0828: A stored Cross-site Scripting (XSS) vulnerability affecting Engineering Release in ENOVIA Product Engineering </title><link>https://patchthecve.com/cve/CVE-2025-0828.html</link><guid>https://patchthecve.com/cve/CVE-2025-0828.html</guid><pubDate>Wed, 17 Jun 2026 08:27:12 +0000</pubDate><description>HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting Engineering Release in ENOVIA Product Engineering Specialist from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user&#x27;s browser session.</description></item><item><title>CVE-2025-0826: A stored Cross-site Scripting (XSS) vulnerability affecting 3D Navigate in ENOVIA Collaborative Industry Innov</title><link>https://patchthecve.com/cve/CVE-2025-0826.html</link><guid>https://patchthecve.com/cve/CVE-2025-0826.html</guid><pubDate>Wed, 17 Jun 2026 08:27:12 +0000</pubDate><description>HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting 3D Navigate in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user&#x27;s browser session.</description></item><item><title>CVE-2025-0601: A stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry </title><link>https://patchthecve.com/cve/CVE-2025-0601.html</link><guid>https://patchthecve.com/cve/CVE-2025-0601.html</guid><pubDate>Wed, 17 Jun 2026 08:26:47 +0000</pubDate><description>HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user&#x27;s browser session.</description></item><item><title>CVE-2025-0600: A stored Cross-site Scripting (XSS) vulnerability affecting Product Explorer in ENOVIA Collaborative Industry </title><link>https://patchthecve.com/cve/CVE-2025-0600.html</link><guid>https://patchthecve.com/cve/CVE-2025-0600.html</guid><pubDate>Wed, 17 Jun 2026 08:26:47 +0000</pubDate><description>HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting Product Explorer in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user&#x27;s browser session.</description></item><item><title>CVE-2025-0599: A stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Indust</title><link>https://patchthecve.com/cve/CVE-2025-0599.html</link><guid>https://patchthecve.com/cve/CVE-2025-0599.html</guid><pubDate>Wed, 17 Jun 2026 08:26:47 +0000</pubDate><description>HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user&#x27;s browser session.</description></item><item><title>CVE-2025-0598: A stored Cross-site Scripting (XSS) vulnerability affecting Relations in ENOVIA Collaborative Industry Innovat</title><link>https://patchthecve.com/cve/CVE-2025-0598.html</link><guid>https://patchthecve.com/cve/CVE-2025-0598.html</guid><pubDate>Wed, 17 Jun 2026 08:26:47 +0000</pubDate><description>HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting Relations in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user&#x27;s browser session.</description></item><item><title>CVE-2025-0596: A stored Cross-site Scripting (XSS) vulnerability affecting Bookmark Editor in ENOVIA Collaborative Industry I</title><link>https://patchthecve.com/cve/CVE-2025-0596.html</link><guid>https://patchthecve.com/cve/CVE-2025-0596.html</guid><pubDate>Wed, 17 Jun 2026 08:26:46 +0000</pubDate><description>HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting Bookmark Editor in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user&#x27;s browser session.</description></item><item><title>CVE-2024-12092: A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator on Release</title><link>https://patchthecve.com/cve/CVE-2024-12092.html</link><guid>https://patchthecve.com/cve/CVE-2024-12092.html</guid><pubDate>Wed, 17 Jun 2026 06:59:02 +0000</pubDate><description>HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user&#x27;s browser session.</description></item><item><title>CVE-2024-12091: A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Relea</title><link>https://patchthecve.com/cve/CVE-2024-12091.html</link><guid>https://patchthecve.com/cve/CVE-2024-12091.html</guid><pubDate>Wed, 17 Jun 2026 06:59:02 +0000</pubDate><description>HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user&#x27;s browser session.</description></item><item><title>CVE-2024-12090: A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator on Release</title><link>https://patchthecve.com/cve/CVE-2024-12090.html</link><guid>https://patchthecve.com/cve/CVE-2024-12090.html</guid><pubDate>Wed, 17 Jun 2026 06:59:01 +0000</pubDate><description>HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user&#x27;s browser session.</description></item><item><title>CVE-2024-12089: A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Relea</title><link>https://patchthecve.com/cve/CVE-2024-12089.html</link><guid>https://patchthecve.com/cve/CVE-2024-12089.html</guid><pubDate>Wed, 17 Jun 2026 06:59:01 +0000</pubDate><description>HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user&#x27;s browser session.</description></item><item><title>CVE-2024-6380: A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Re</title><link>https://patchthecve.com/cve/CVE-2024-6380.html</link><guid>https://patchthecve.com/cve/CVE-2024-6380.html</guid><pubDate>Wed, 17 Jun 2026 08:17:53 +0000</pubDate><description>HIGH 8.7: A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user&#x27;s browser session.</description></item><item><title>CVE-2024-7736: A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Re</title><link>https://patchthecve.com/cve/CVE-2024-7736.html</link><guid>https://patchthecve.com/cve/CVE-2024-7736.html</guid><pubDate>Wed, 17 Jun 2026 08:20:49 +0000</pubDate><description>HIGH 8.7: A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user&#x27;s browser session.</description></item><item><title>CVE-2024-8004: A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Relea</title><link>https://patchthecve.com/cve/CVE-2024-8004.html</link><guid>https://patchthecve.com/cve/CVE-2024-8004.html</guid><pubDate>Wed, 17 Jun 2026 08:21:39 +0000</pubDate><description>HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user&#x27;s browser session.</description></item></channel></rss>