CVE-2024-12089: Stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release ...
8.7
CVSS
Description
A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.
Classification
CVE ID: CVE-2024-12089
CVSS Base Severity: HIGH
CVSS Base Score: 8.7
Affected Products
Vendor: Dassault Systèmes
Product: ENOVIA Collaborative Industry Innovator
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.48% (scored less or equal to compared to others)
EPSS Date: 2025-02-04 (when was this score calculated)