3D
Vendor
3ds
16 products with CVEs on record
61
CVEs
3
On KEV
0
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2025-10559
3D
3dexperience
3ds
9.1
0%
Mar 31Path Traversal vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x
CVE-2025-10553
3D
3dexperience
3ds
5.4
0%
Mar 31Stored Cross-site Scripting (XSS) vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x
CVE-2025-10551
3D
3dexperience
3ds
5.4
0%
Mar 31Stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x
CVE-2026-3476
SO
Solidworks
3ds
7.8
0%
Mar 16Code Injection vulnerability affecting SOLIDWORKS Desktop from Release 2025 through Release 2026
CVE-2026-1335
SE
Solidworks Edrawings
3ds
7.8
0%
Feb 16Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026
CVE-2026-1334
SE
Solidworks Edrawings
3ds
7.8
0%
Feb 16Out-Of-Bounds Read vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026
CVE-2026-1333
SE
Solidworks Edrawings
3ds
7.8
0%
Feb 16Use of Uninitialized Variable vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026
CVE-2025-12956
3E
3dexperience Enovia
3ds
5.4
0%
Dec 8Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x
CVE-2025-10554
3E
3dexperience Enovia
3ds
5.4
0%
Nov 24Stored Cross-site Scripting (XSS) vulnerability affecting Requirements in ENOVIA Product Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x
CVE-2025-10558
3D
3dswymer
3ds
6.1
0%
Oct 13Stored Cross-site Scripting (XSS) vulnerability affecting 3DSearch in 3DSwymer on Release 3DEXPERIENCE R2025x
CVE-2025-10557
3E
3dexperience Enovia
3ds
5.4
0%
Oct 13Stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x
CVE-2025-10556
3E
3dexperience Enovia
3ds
5.4
0%
Oct 13Stored Cross-site Scripting (XSS) vulnerability affecting Specification Management in ENOVIA Specification Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x
CVE-2025-10552
3D
3dswymer
3ds
6.1
0%
Oct 13Stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2025x
CVE-2025-6205
In wildKEV
DA
Delmia Apriso
3ds
9.1
74%
Aug 4Missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025
CVE-2025-6204
In wildKEV
DA
Delmia Apriso
3ds
8.0
80%
Aug 4Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025
CVE-2025-5086
In wildKEV
DA
Delmia Apriso
3ds
9.0
97%
Jun 2Deserialization of Untrusted Data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025
CVE-2025-0833
3E
3dexperience Enovia
3ds
5.4
0%
Mar 17A stored Cross-site Scripting (XSS) vulnerability affecting Route Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release…
CVE-2025-0832
3E
3dexperience Enovia
3ds
5.4
0%
Mar 17A stored Cross-site Scripting (XSS) vulnerability affecting Project Gantt in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE…
CVE-2025-0830
3E
3dexperience Enovia
3ds
5.4
0%
Mar 17A stored Cross-site Scripting (XSS) vulnerability affecting Meeting Management in ENOVIA Change Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows…
CVE-2025-0829
3E
3dexperience Enovia
3ds
5.4
0%
Mar 17A stored Cross-site Scripting (XSS) vulnerability affecting 3D Markup in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE…
CVE-2025-0828
3E
3dexperience Enovia
3ds
5.4
0%
Mar 17A stored Cross-site Scripting (XSS) vulnerability affecting Engineering Release in ENOVIA Product Engineering Specialist from Release 3DEXPERIENCE R2022x through Release…
CVE-2025-0826
3E
3dexperience Enovia
3ds
5.4
0%
Mar 17A stored Cross-site Scripting (XSS) vulnerability affecting 3D Navigate in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE…
CVE-2025-0601
3E
3dexperience Enovia
3ds
5.4
0%
Mar 17A stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release…
CVE-2025-0600
3E
3dexperience Enovia
3ds
5.4
0%
Mar 17A stored Cross-site Scripting (XSS) vulnerability affecting Product Explorer in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to…
CVE-2025-0599
3E
3dexperience Enovia
3ds
5.4
0%
Mar 17A stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to…
CVE-2025-0598
3E
3dexperience Enovia
3ds
5.4
0%
Mar 17A stored Cross-site Scripting (XSS) vulnerability affecting Relations in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE…
CVE-2025-0596
3E
3dexperience Enovia
3ds
5.4
0%
Mar 17A stored Cross-site Scripting (XSS) vulnerability affecting Bookmark Editor in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute…
CVE-2024-12092
3E
3dexperience Enovia
3ds
5.4
0%
Dec 16A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script…
CVE-2024-12091
3E
3dexperience Enovia
3ds
5.4
0%
Dec 16A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an…
CVE-2024-12090
3E
3dexperience Enovia
3ds
5.4
0%
Dec 16A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script…
CVE-2024-12089
3E
3dexperience Enovia
3ds
5.4
0%
Dec 16A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an…
CVE-2024-6380
3E
3dexperience Enovia
3ds
5.4
0%
Oct 16A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows…
CVE-2024-7736
3E
3dexperience Enovia
3ds
5.4
0%
Sep 19A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows…
CVE-2024-8004
3E
3dexperience Enovia
3ds
5.4
0%
Sep 2Stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x
CVE-2024-7939
3D
3dexperience
3ds
5.4
0%
Sep 2Stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2024x
CVE-2024-7938
3D
3dexperience
3ds
5.4
0%
Sep 2Stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x
CVE-2024-7932
3D
3dexperience
3ds
5.4
0%
Sep 2Stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer on Release 3DEXPERIENCE R2024x
CVE-2024-6379
3D
3dexperience
3ds
6.1
0%
Aug 20A reflected Cross-site Scripting (XSS) vulnerability affecting 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute…
CVE-2024-6378
3D
3dexperience
3ds
5.4
0%
Aug 20A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows…
CVE-2024-6377
3D
3dexperience
3ds
6.1
0%
Aug 20An URL redirection to untrusted site (open redirect) vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an…
CVE-2024-1847
SO
Solidworks
3ds
7.8
0%
Feb 28Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Variable, Use-After-Free…
CVE-2024-0935
DA
Delmia Apriso
3ds
7.5
0%
Feb 1Insertion of Sensitive Information into Log File vulnerabilities are affecting DELMIA Apriso Release 2019 through Release 2024
CVE-2023-6078
BM
Biovia Materials Studio
3ds
9.8
2%
Feb 1An OS Command Injection vulnerability exists in BIOVIA Materials Studio products from Release BIOVIA 2021 through Release BIOVIA 2023
CVE-2023-3589
TC
Teamwork Cloud NO Magic Release
3ds
7.5
0%
Oct 9A Cross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x could allow with some very specific…
CVE-2023-3588
TC
Teamwork Cloud NO Magic Release
3ds
5.4
0%
Sep 13A stored Cross-site Scripting (XSS) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x allows an attacker to execute arbitrary…
CVE-2023-1997
3D
3dexperience
3ds
8.8
2%
Aug 28An OS Command Injection vulnerability exists in SIMULIA 3DOrchestrate from Release 3DEXPERIENCE R2021x through Release 3DEXPERIENCE R2023x
CVE-2023-2763
3S
3dexperience Solidworks
3ds
7.8
0%
Jul 12Use-After-Free, Out-of-bounds Write and Heap-based Buffer Overflow vulnerabilities exist in the DWG and DXF file reading procedure in SOLIDWORKS Desktop from Release SOLIDWORKS…
CVE-2023-2762
3S
3dexperience Solidworks
3ds
7.8
0%
Jul 12A Use-After-Free vulnerability in SLDPRT file reading procedure exists in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023
CVE-2023-1996
3D
3dexperience
3ds
6.1
0%
May 19A reflected Cross-site Scripting (XSS) vulnerability in Release 3DEXPERIENCE R2018x through Release 3DEXPERIENCE R2023x allows an attacker to execute arbitrary script code
CVE-2023-2141
DA
Delmia Apriso
3ds
8.8
1%
Apr 21An unsafe .NET object deserialization in DELMIA Apriso Release 2017 through Release 2022 could lead to post-authentication remote code execution
CVE-2023-2140
DA
Delmia Apriso
3ds
7.5
1%
Apr 21A Server-Side Request Forgery vulnerability in DELMIA Apriso Release 2017 through Release 2022 could allow an unauthenticated attacker to issue requests to arbitrary hosts on…
CVE-2023-2139
DA
Delmia Apriso
3ds
6.1
0%
Apr 21A reflected Cross-site Scripting (XSS) Vulnerability in DELMIA Apriso Release 2017 through Release 2022 allows an attacker to execute arbitrary script code
CVE-2023-1288
EL
Enovia Live Collaboration
3ds
7.5
1%
Mar 9An XML External Entity injection (XXE) vulnerability in ENOVIA Live Collaboration V6R2013xE allows an attacker to read local files on the server
CVE-2023-1287
EL
Enovia Live Collaboration
3ds
9.8
1%
Mar 9An XSL template vulnerability in ENOVIA Live Collaboration V6R2013xE allows Remote Code Execution
CVE-2020-25507
TC
Teamwork Cloud
3ds
7.8
1%
Dec 28An incorrect permission assignment during the installation script of TeamworkCloud 18.0 thru 19.0 allows a local unprivileged attacker to execute arbitrary code as root
CVE-2014-2072
CA
Catia
3ds
9.8
7%
Jan 8Dassault Systemes Catia V5-6R2013: Stack Buffer Overflow due to inadequate boundary checks
CVE-2014-2073
CA
Catia
3ds
9.8
5%
Apr 10Stack-based buffer overflow in Dassault Systemes CATIA V5-6R2013 allows remote attackers to execute arbitrary code via a crafted packet, related to "CATV5_Backbone_Bus."
CVE-2013-4721
P3
Push2rss 3ds
3ds
–
1%
Jun 27SQL injection vulnerability in the RSS feed from records extension 1.0.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors
CVE-2012-4883
3C
3dvia Composer
3ds
–
0%
Sep 7Multiple untrusted search path vulnerabilities in 3DVIA Composer V6R2012 HF1 Build 6.8.1.1652 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2)…
CVE-2012-4882
3X
3d Xml Player
3ds
–
0%
Sep 7Multiple untrusted search path vulnerabilities in 3D XML Player 6.212.13.12076 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2) JT0DevPhase.dll file…