Back to Database
Status published
Low
CVE-2009-0809
The Web Editor in Dassault Systemes ENOVIA SmarTeam V5 before...
Vulnerability Description
The Web Editor in Dassault Systemes ENOVIA SmarTeam V5 before Release 18 Service Pack 8, and possibly CATIA and other products, allows remote authenticated users to read the profile card of an object in the document class via a link that is sent from the owner of the document object.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2009-0809
Credits & Attribution
No credits recorded in the NVD database.
References
More from 3ds
View All →CVE-2020-25507
An incorrect permission assignment during the installation script of TeamworkCloud...
High
7.8
CVE-2014-2073
Stack-based buffer overflow in Dassault Systemes CATIA V5-6R2013 allows remote...
Critical
9.8
CVE-2014-2072
Dassault Systemes Catia V5-6R2013: Stack Buffer Overflow due to inadequate...
Critical
9.8
CVE-2013-4721
SQL injection vulnerability in the RSS feed from records extension...
High
7.5
CVE-2012-4883
Multiple untrusted search path vulnerabilities in 3DVIA Composer V6R2012 HF1...
Medium
6.9
Affected Vendor
Affected Software
enovia smarteam, catia
Vulnerable Versions:
0, 5.16, 5.17
Timeline
Official Publish:
March 4th, 2009
Last Modified:
September 16th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.