Back to Database
Status published
Medium
CVE-2023-1996
Reflected Cross-site Scripting (XSS) vulnerability affecting Release 3DEXPERIENCE R2018x through Release 3DEXPERIENCE R2023x
Vulnerability Description
A reflected Cross-site Scripting (XSS) vulnerability in Release 3DEXPERIENCE R2018x through Release 3DEXPERIENCE R2023x allows an attacker to execute arbitrary script code.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-1996
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Bhashit Pandya from Ownux Global
References
More from Dassault Systèmes
View All →CVE-2025-9976
OS Command Injection vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x
Critical
9
CVE-2025-9450
Use of Uninitialized Variable vulnerability affecting the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025
High
7.8
CVE-2025-9449
Use After Free vulnerability affecting the PAR file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025
High
7.8
CVE-2025-9447
Out-Of-Bounds Read affecting the PAR file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025
High
7.8
CVE-2025-7042
Use After Free vulnerability exists in the IPT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025
High
7.8
Affected Vendor
Dassault Systèmes
View all reports →Affected Software
3DEXPERIENCE
Vulnerable Versions:
Release 3DEXPERIENCE R2018x - All levels, Release 3DEXPERIENCE R2019x - All levels, Release 3DEXPERIENCE R2020x Golden, Release 3DEXPERIENCE R2021x Golden, Release 3DEXPERIENCE R2022x Golden, Release 3DEXPERIENCE R2023x Golden
Timeline
Official Publish:
May 19th, 2023
Last Modified:
February 12th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N