Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-6379

A reflected Cross-site Scripting (XSS) vulnerability affecting 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.

Published

2024-08-20T14:15:10.323

Last Modified

2024-08-27T09:15:03.780

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.7 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-79
  • Type: Primary
    CWE-79
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System 3ds 3dexperience ≤ r2024x Yes
References