3ds vulnerabilities

Recent CVEs affecting 3ds products. 37 tracked.

3ds has 37 tracked vulnerabilities, 2 critical and 3 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 21. Most recent: 2026-03-16. Highest priority: CVE-2025-5086 (score 91/100).

CVE-2025-10554 HIGH 8.7 UPGRADE A stored Cross-site Scripting (XSS) vulnerability affecting Requirements in ENOVIA Product Manager from Releas
CVE-2025-10552 HIGH 8.7 DOWNGRADE A stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2025x
CVE-2025-10556 HIGH 8.7 UPGRADE A stored Cross-site Scripting (XSS) vulnerability affecting Specification Management in ENOVIA Specification M
CVE-2025-10557 HIGH 8.7 UPGRADE A stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry
CVE-2025-10558 HIGH 8.7 DOWNGRADE A stored Cross-site Scripting (XSS) vulnerability affecting 3DSearch in 3DSwymer on Release 3DEXPERIENCE R2025
CVE-2025-12956 HIGH 8.7 UPGRADE A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Re
CVE-2026-3476 HIGH 7.8 UPGRADE A Code Injection vulnerability affecting SOLIDWORKS Desktop from Release 2025 through Release 2026 could allow
CVE-2026-1335 HIGH 7.8 DOWNGRADE An Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Re
CVE-2026-1334 HIGH 7.8 DOWNGRADE An Out-Of-Bounds Read vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Rel
CVE-2026-1333 HIGH 7.8 DOWNGRADE A Use of Uninitialized Variable vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawing
CVE-2025-6205 CRITICAL 9.1 EXPLOITED UPGRADE Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability
CVE-2025-6204 HIGH 8.0 EXPLOITED UPGRADE Dassault Systèmes DELMIA Apriso Code Injection Vulnerability
CVE-2025-5086 CRITICAL 9.0 EXPLOITED UPGRADE Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability
CVE-2025-0833 HIGH 8.7 DOWNGRADE A stored Cross-site Scripting (XSS) vulnerability affecting Route Management in ENOVIA Collaborative Industry
CVE-2025-0832 HIGH 8.7 UPGRADE A stored Cross-site Scripting (XSS) vulnerability affecting Project Gantt in ENOVIA Collaborative Industry Inn
CVE-2025-0830 HIGH 8.7 UPGRADE A stored Cross-site Scripting (XSS) vulnerability affecting Meeting Management in ENOVIA Change Manager from R
CVE-2025-0829 HIGH 8.7 UPGRADE A stored Cross-site Scripting (XSS) vulnerability affecting 3D Markup in ENOVIA Collaborative Industry Innovat
CVE-2025-0828 HIGH 8.7 UPGRADE A stored Cross-site Scripting (XSS) vulnerability affecting Engineering Release in ENOVIA Product Engineering
CVE-2025-0826 HIGH 8.7 UPGRADE A stored Cross-site Scripting (XSS) vulnerability affecting 3D Navigate in ENOVIA Collaborative Industry Innov
CVE-2025-0601 HIGH 8.7 UPGRADE A stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry
CVE-2025-0600 HIGH 8.7 DOWNGRADE A stored Cross-site Scripting (XSS) vulnerability affecting Product Explorer in ENOVIA Collaborative Industry
CVE-2025-0599 HIGH 8.7 DOWNGRADE A stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Indust
CVE-2025-0598 HIGH 8.7 DOWNGRADE A stored Cross-site Scripting (XSS) vulnerability affecting Relations in ENOVIA Collaborative Industry Innovat
CVE-2025-0596 HIGH 8.7 DOWNGRADE A stored Cross-site Scripting (XSS) vulnerability affecting Bookmark Editor in ENOVIA Collaborative Industry I
CVE-2024-8004 HIGH 8.7 DOWNGRADE A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Relea
CVE-2024-7939 HIGH 8.7 DOWNGRADE A stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2024x
CVE-2024-7938 HIGH 8.7 DOWNGRADE A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE
CVE-2024-7932 HIGH 8.7 DOWNGRADE A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer on Release 3DEXPERIENCE R2
CVE-2024-7736 HIGH 8.7 UPGRADE A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Re
CVE-2024-6380 HIGH 8.7 UPGRADE A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Re
CVE-2024-6379 HIGH 7.7 UPGRADE A reflected Cross-site Scripting (XSS) vulnerability affecting 3DSwymer from Release 3DEXPERIENCE R2022x throu
CVE-2024-6378 HIGH 8.7 UPGRADE A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Re
CVE-2024-6377 HIGH 8.1 UPGRADE An URL redirection to untrusted site (open redirect) vulnerability affecting 3DPassport in 3DSwymer from Relea
CVE-2024-12092 HIGH 8.7 DOWNGRADE A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator on Release
CVE-2024-12091 HIGH 8.7 UPGRADE A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Relea
CVE-2024-12090 HIGH 8.7 DOWNGRADE A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator on Release
CVE-2024-12089 HIGH 8.7 UPGRADE A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Relea

FAQ

How do I fix 3ds vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is 3ds being exploited right now?

Yes: 3 3ds CVEs are on the CISA Known Exploited Vulnerabilities list, so patch those first.

Which 3ds CVE should I patch first?

CVE-2025-5086 currently ranks highest (91/100): Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability.

Products

RSS feed for 3ds · ← Back to latest CVEs