Back to Database
Status published
Critical
CVE-2023-1287
ENOVIA Live Collaboration V6R2013xE is affected by an XSL template injection vulnerability
Vulnerability Description
An XSL template vulnerability in ENOVIA Live Collaboration V6R2013xE allows Remote Code Execution.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-1287
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Shadi Habbal from TÜV Rheinland i-sec GmbH
References
More from Dassault Systèmes
View All →CVE-2025-9976
OS Command Injection vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x
Critical
9
CVE-2025-9450
Use of Uninitialized Variable vulnerability affecting the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025
High
7.8
CVE-2025-9449
Use After Free vulnerability affecting the PAR file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025
High
7.8
CVE-2025-9447
Out-Of-Bounds Read affecting the PAR file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025
High
7.8
CVE-2025-7042
Use After Free vulnerability exists in the IPT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025
High
7.8
Affected Vendor
Dassault Systèmes
View all reports →Affected Software
ENOVIA Live Collaboration
Vulnerable Versions:
V6R2013xE Golden
Timeline
Official Publish:
March 9th, 2023
Last Modified:
February 28th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H