PatchTheCVE: 3dshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2026-3476: A Code Injection vulnerability affecting SOLIDWORKS Desktop from Release 2025 through Release 2026 could allowhttps://patchthecve.com/cve/CVE-2026-3476.htmlhttps://patchthecve.com/cve/CVE-2026-3476.htmlWed, 17 Jun 2026 10:43:38 +0000HIGH 7.8: A Code Injection vulnerability affecting SOLIDWORKS Desktop from Release 2025 through Release 2026 could allow an attacker to execute arbitrary code on the user's machine while opening a specially crafted file.CVE-2026-1335: An Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Rehttps://patchthecve.com/cve/CVE-2026-1335.htmlhttps://patchthecve.com/cve/CVE-2026-1335.htmlWed, 17 Jun 2026 10:15:37 +0000HIGH 7.8: An Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file.CVE-2026-1334: An Out-Of-Bounds Read vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Relhttps://patchthecve.com/cve/CVE-2026-1334.htmlhttps://patchthecve.com/cve/CVE-2026-1334.htmlWed, 17 Jun 2026 10:15:37 +0000HIGH 7.8: An Out-Of-Bounds Read vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file.CVE-2026-1333: A Use of Uninitialized Variable vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawinghttps://patchthecve.com/cve/CVE-2026-1333.htmlhttps://patchthecve.com/cve/CVE-2026-1333.htmlWed, 17 Jun 2026 10:15:37 +0000HIGH 7.8: A Use of Uninitialized Variable vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file.CVE-2025-12956: A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Rehttps://patchthecve.com/cve/CVE-2025-12956.htmlhttps://patchthecve.com/cve/CVE-2025-12956.htmlWed, 07 Oct 2026 20:10:01 +0000HIGH 8.7: A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.CVE-2025-10554: A stored Cross-site Scripting (XSS) vulnerability affecting Requirements in ENOVIA Product Manager from Releashttps://patchthecve.com/cve/CVE-2025-10554.htmlhttps://patchthecve.com/cve/CVE-2025-10554.htmlSun, 18 Oct 2026 20:10:00 +0000HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting Requirements in ENOVIA Product Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.CVE-2025-10558: A stored Cross-site Scripting (XSS) vulnerability affecting 3DSearch in 3DSwymer on Release 3DEXPERIENCE R2025https://patchthecve.com/cve/CVE-2025-10558.htmlhttps://patchthecve.com/cve/CVE-2025-10558.htmlThu, 08 Oct 2026 12:10:00 +0000HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting 3DSearch in 3DSwymer on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.CVE-2025-10557: A stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry https://patchthecve.com/cve/CVE-2025-10557.htmlhttps://patchthecve.com/cve/CVE-2025-10557.htmlThu, 08 Oct 2026 12:10:00 +0000HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.CVE-2025-10556: A stored Cross-site Scripting (XSS) vulnerability affecting Specification Management in ENOVIA Specification Mhttps://patchthecve.com/cve/CVE-2025-10556.htmlhttps://patchthecve.com/cve/CVE-2025-10556.htmlThu, 08 Oct 2026 12:10:00 +0000HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting Specification Management in ENOVIA Specification Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.CVE-2025-10552: A stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2025x https://patchthecve.com/cve/CVE-2025-10552.htmlhttps://patchthecve.com/cve/CVE-2025-10552.htmlThu, 08 Oct 2026 12:10:00 +0000HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.CVE-2025-6205: Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerabilityhttps://patchthecve.com/cve/CVE-2025-6205.htmlhttps://patchthecve.com/cve/CVE-2025-6205.htmlWed, 17 Jun 2026 10:01:22 +0000CRITICAL 9.1: A missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to gain privileged access to the application.CVE-2025-6204: Dassault Systèmes DELMIA Apriso Code Injection Vulnerabilityhttps://patchthecve.com/cve/CVE-2025-6204.htmlhttps://patchthecve.com/cve/CVE-2025-6204.htmlWed, 17 Jun 2026 10:01:22 +0000HIGH 8.0: An Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to execute arbitrary code.CVE-2025-5086: Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerabilityhttps://patchthecve.com/cve/CVE-2025-5086.htmlhttps://patchthecve.com/cve/CVE-2025-5086.htmlWed, 17 Jun 2026 09:47:10 +0000CRITICAL 9.0: A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could lead to a remote code execution.CVE-2025-0833: A stored Cross-site Scripting (XSS) vulnerability affecting Route Management in ENOVIA Collaborative Industry https://patchthecve.com/cve/CVE-2025-0833.htmlhttps://patchthecve.com/cve/CVE-2025-0833.htmlWed, 17 Jun 2026 08:27:13 +0000HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting Route Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.CVE-2025-0832: A stored Cross-site Scripting (XSS) vulnerability affecting Project Gantt in ENOVIA Collaborative Industry Innhttps://patchthecve.com/cve/CVE-2025-0832.htmlhttps://patchthecve.com/cve/CVE-2025-0832.htmlWed, 17 Jun 2026 08:27:13 +0000HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting Project Gantt in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.CVE-2025-0830: A stored Cross-site Scripting (XSS) vulnerability affecting Meeting Management in ENOVIA Change Manager from Rhttps://patchthecve.com/cve/CVE-2025-0830.htmlhttps://patchthecve.com/cve/CVE-2025-0830.htmlWed, 17 Jun 2026 08:27:13 +0000HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting Meeting Management in ENOVIA Change Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.CVE-2025-0829: A stored Cross-site Scripting (XSS) vulnerability affecting 3D Markup in ENOVIA Collaborative Industry Innovathttps://patchthecve.com/cve/CVE-2025-0829.htmlhttps://patchthecve.com/cve/CVE-2025-0829.htmlWed, 17 Jun 2026 08:27:12 +0000HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting 3D Markup in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.CVE-2025-0828: A stored Cross-site Scripting (XSS) vulnerability affecting Engineering Release in ENOVIA Product Engineering https://patchthecve.com/cve/CVE-2025-0828.htmlhttps://patchthecve.com/cve/CVE-2025-0828.htmlWed, 17 Jun 2026 08:27:12 +0000HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting Engineering Release in ENOVIA Product Engineering Specialist from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.CVE-2025-0826: A stored Cross-site Scripting (XSS) vulnerability affecting 3D Navigate in ENOVIA Collaborative Industry Innovhttps://patchthecve.com/cve/CVE-2025-0826.htmlhttps://patchthecve.com/cve/CVE-2025-0826.htmlWed, 17 Jun 2026 08:27:12 +0000HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting 3D Navigate in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.CVE-2025-0601: A stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry https://patchthecve.com/cve/CVE-2025-0601.htmlhttps://patchthecve.com/cve/CVE-2025-0601.htmlWed, 17 Jun 2026 08:26:47 +0000HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.CVE-2025-0600: A stored Cross-site Scripting (XSS) vulnerability affecting Product Explorer in ENOVIA Collaborative Industry https://patchthecve.com/cve/CVE-2025-0600.htmlhttps://patchthecve.com/cve/CVE-2025-0600.htmlWed, 17 Jun 2026 08:26:47 +0000HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting Product Explorer in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.CVE-2025-0599: A stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industhttps://patchthecve.com/cve/CVE-2025-0599.htmlhttps://patchthecve.com/cve/CVE-2025-0599.htmlWed, 17 Jun 2026 08:26:47 +0000HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.CVE-2025-0598: A stored Cross-site Scripting (XSS) vulnerability affecting Relations in ENOVIA Collaborative Industry Innovathttps://patchthecve.com/cve/CVE-2025-0598.htmlhttps://patchthecve.com/cve/CVE-2025-0598.htmlWed, 17 Jun 2026 08:26:47 +0000HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting Relations in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.CVE-2025-0596: A stored Cross-site Scripting (XSS) vulnerability affecting Bookmark Editor in ENOVIA Collaborative Industry Ihttps://patchthecve.com/cve/CVE-2025-0596.htmlhttps://patchthecve.com/cve/CVE-2025-0596.htmlWed, 17 Jun 2026 08:26:46 +0000HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting Bookmark Editor in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.CVE-2024-12092: A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator on Releasehttps://patchthecve.com/cve/CVE-2024-12092.htmlhttps://patchthecve.com/cve/CVE-2024-12092.htmlWed, 17 Jun 2026 06:59:02 +0000HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.CVE-2024-12091: A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Releahttps://patchthecve.com/cve/CVE-2024-12091.htmlhttps://patchthecve.com/cve/CVE-2024-12091.htmlWed, 17 Jun 2026 06:59:02 +0000HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.CVE-2024-12090: A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator on Releasehttps://patchthecve.com/cve/CVE-2024-12090.htmlhttps://patchthecve.com/cve/CVE-2024-12090.htmlWed, 17 Jun 2026 06:59:01 +0000HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.CVE-2024-12089: A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Releahttps://patchthecve.com/cve/CVE-2024-12089.htmlhttps://patchthecve.com/cve/CVE-2024-12089.htmlWed, 17 Jun 2026 06:59:01 +0000HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.CVE-2024-6380: A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Rehttps://patchthecve.com/cve/CVE-2024-6380.htmlhttps://patchthecve.com/cve/CVE-2024-6380.htmlWed, 17 Jun 2026 08:17:53 +0000HIGH 8.7: A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.CVE-2024-7736: A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Rehttps://patchthecve.com/cve/CVE-2024-7736.htmlhttps://patchthecve.com/cve/CVE-2024-7736.htmlWed, 17 Jun 2026 08:20:49 +0000HIGH 8.7: A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.CVE-2024-8004: A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Releahttps://patchthecve.com/cve/CVE-2024-8004.htmlhttps://patchthecve.com/cve/CVE-2024-8004.htmlWed, 17 Jun 2026 08:21:39 +0000HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.CVE-2024-7939: A stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2024x https://patchthecve.com/cve/CVE-2024-7939.htmlhttps://patchthecve.com/cve/CVE-2024-7939.htmlWed, 17 Jun 2026 08:21:14 +0000HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.CVE-2024-7938: A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE https://patchthecve.com/cve/CVE-2024-7938.htmlhttps://patchthecve.com/cve/CVE-2024-7938.htmlWed, 17 Jun 2026 08:21:14 +0000HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.CVE-2024-7932: A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer on Release 3DEXPERIENCE R2https://patchthecve.com/cve/CVE-2024-7932.htmlhttps://patchthecve.com/cve/CVE-2024-7932.htmlWed, 17 Jun 2026 08:21:13 +0000HIGH 8.7: A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.CVE-2024-6379: A reflected Cross-site Scripting (XSS) vulnerability affecting 3DSwymer from Release 3DEXPERIENCE R2022x throuhttps://patchthecve.com/cve/CVE-2024-6379.htmlhttps://patchthecve.com/cve/CVE-2024-6379.htmlWed, 17 Jun 2026 08:17:53 +0000HIGH 7.7: A reflected Cross-site Scripting (XSS) vulnerability affecting 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.CVE-2024-6378: A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Rehttps://patchthecve.com/cve/CVE-2024-6378.htmlhttps://patchthecve.com/cve/CVE-2024-6378.htmlWed, 17 Jun 2026 08:17:53 +0000HIGH 8.7: A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.CVE-2024-6377: An URL redirection to untrusted site (open redirect) vulnerability affecting 3DPassport in 3DSwymer from Releahttps://patchthecve.com/cve/CVE-2024-6377.htmlhttps://patchthecve.com/cve/CVE-2024-6377.htmlWed, 17 Jun 2026 08:17:53 +0000HIGH 8.1: An URL redirection to untrusted site (open redirect) vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to redirect users to an arbitrary website via a crafted URL.