Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-7938

A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.

Published

2024-09-02T12:15:20.333

Last Modified

2024-09-04T14:53:13.887

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 8.7 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-79
  • Type: Primary
    CWE-79
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application 3ds 3dexperience r2023x Yes
Application 3ds 3dexperience r2024x Yes
References