Lucene search

[email protected]CVE-2023-1996

HistoryMay 19, 2023 - 5:15 p.m.

CVE-2023-1996

2023-05-1917:15:09

CWE-79

[email protected]

web.nvd.nist.gov

cve-2023-1996

reflected xss

cross-site scripting

3dexperience

r2018x

r2023x

security vulnerability

nvd

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.0005 Low

EPSS

Percentile

18.4%

JSON

A reflected Cross-site Scripting (XSS) vulnerability in Release 3DEXPERIENCE R2018x through Release 3DEXPERIENCE R2023x allows an attacker to execute arbitrary script code.

Affected configurations

NVD

Node

3ds3dexperienceRanger2018x–r2023x

CPENameOperatorVersion
3ds:3dexperience3ds 3dexperienceler2023x

CPE	Name	Operator	Version
3ds:3dexperience	3ds 3dexperience	le	r2023x

CNA Affected

[
  {
    "vendor": "Dassault Systèmes",
    "product": "3DEXPERIENCE",
    "versions": [
      {
        "status": "affected",
        "version": "Release 3DEXPERIENCE R2018x - All levels"
      },
      {
        "status": "affected",
        "version": "Release 3DEXPERIENCE R2019x - All levels"
      },
      {
        "status": "affected",
        "version": "Release 3DEXPERIENCE R2020x Golden",
        "lessThanOrEqual": "Release 3DEXPERIENCE R2020x.FP.CFA.2303",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "Release 3DEXPERIENCE R2021x Golden",
        "lessThanOrEqual": "Release 3DEXPERIENCE R2021x.FP.CFA.2306",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "Release 3DEXPERIENCE R2022x Golden",
        "lessThanOrEqual": "Release 3DEXPERIENCE R2022x FP.CFA.2250",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "Release 3DEXPERIENCE R2023x Golden",
        "lessThanOrEqual": "Release 3DEXPERIENCE R2023x.FP.CFA.2306",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.3ds.com/vulnerability/advisories

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.0005 Low

EPSS

Percentile

18.4%

JSON

Related for CVE-2023-1996

cvelist1 nvd1 prion1