3D
Vendor
3ds
61
CVEs
3
On KEV
0
New 30D
Products
DA9.1
Delmia Apriso
3ds
7 CVEs3 on KEV0 new
3E5.4
3dexperience Enovia
3ds
22 CVEs0 on KEV0 new
3D9.1
3dexperience
3ds
11 CVEs0 on KEV0 new
SE7.8
Solidworks Edrawings
3ds
3 CVEs0 on KEV0 new
3S7.8
3dexperience Solidworks
3ds
2 CVEs0 on KEV0 new
3D6.1
3dswymer
3ds
2 CVEs0 on KEV0 new
CA9.8
Catia
3ds
2 CVEs0 on KEV0 new
EL9.8
Enovia Live Collaboration
3ds
2 CVEs0 on KEV0 new
SO7.8
Solidworks
3ds
2 CVEs0 on KEV0 new
TC7.5
Teamwork Cloud NO Magic Release
3ds
2 CVEs0 on KEV0 new
3X–
3d Xml Player
3ds
1 CVEs0 on KEV0 new
3C–
3dvia Composer
3ds
1 CVEs0 on KEV0 new
BM9.8
Biovia Materials Studio
3ds
1 CVEs0 on KEV0 new
ES–
Enovia Smarteam
3ds
1 CVEs0 on KEV0 new
P3–
Push2rss 3ds
3ds
1 CVEs0 on KEV0 new
TC7.8
Teamwork Cloud
3ds
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-10559 | 3D 3dexperience 3ds | 9.1 | Mar 31 | Path Traversal vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x |
| CVE-2025-10553 | 3D 3dexperience 3ds | 5.4 | Mar 31 | Stored Cross-site Scripting (XSS) vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x |
| CVE-2025-10551 | 3D 3dexperience 3ds | 5.4 | Mar 31 | Stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x |
| CVE-2026-3476 | SO Solidworks 3ds | 7.8 | Mar 16 | Code Injection vulnerability affecting SOLIDWORKS Desktop from Release 2025 through Release 2026 |
| CVE-2026-1335 | SE Solidworks Edrawings 3ds | 7.8 | Feb 16 | Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 |
| CVE-2026-1334 | SE Solidworks Edrawings 3ds | 7.8 | Feb 16 | Out-Of-Bounds Read vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 |
| CVE-2026-1333 | SE Solidworks Edrawings 3ds | 7.8 | Feb 16 | Use of Uninitialized Variable vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 |
| CVE-2025-12956 | 3E 3dexperience Enovia 3ds | 5.4 | Dec 8 | Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x |
| CVE-2025-10554 | 3E 3dexperience Enovia 3ds | 5.4 | Nov 24 | Stored Cross-site Scripting (XSS) vulnerability affecting Requirements in ENOVIA Product Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x |
| CVE-2025-10558 | 3D 3dswymer 3ds | 6.1 | Oct 13 | Stored Cross-site Scripting (XSS) vulnerability affecting 3DSearch in 3DSwymer on Release 3DEXPERIENCE R2025x |
| CVE-2025-10557 | 3E 3dexperience Enovia 3ds | 5.4 | Oct 13 | Stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x |
| CVE-2025-10556 | 3E 3dexperience Enovia 3ds | 5.4 | Oct 13 | Stored Cross-site Scripting (XSS) vulnerability affecting Specification Management in ENOVIA Specification Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x |
| CVE-2025-10552 | 3D 3dswymer 3ds | 6.1 | Oct 13 | Stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2025x |
| CVE-2025-6205 In wildKEV | DA Delmia Apriso 3ds | 9.1 | Aug 4 | Missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 |
| CVE-2025-6204 In wildKEV | DA Delmia Apriso 3ds | 8.0 | Aug 4 | Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 |
| CVE-2025-5086 In wildKEV | DA Delmia Apriso 3ds | 9.0 | Jun 2 | Deserialization of Untrusted Data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 |
| CVE-2025-0833 | 3E 3dexperience Enovia 3ds | 5.4 | Mar 17 | A stored Cross-site Scripting (XSS) vulnerability affecting Route Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release… |
| CVE-2025-0832 | 3E 3dexperience Enovia 3ds | 5.4 | Mar 17 | A stored Cross-site Scripting (XSS) vulnerability affecting Project Gantt in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE… |
| CVE-2025-0830 | 3E 3dexperience Enovia 3ds | 5.4 | Mar 17 | A stored Cross-site Scripting (XSS) vulnerability affecting Meeting Management in ENOVIA Change Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows… |
| CVE-2025-0829 | 3E 3dexperience Enovia 3ds | 5.4 | Mar 17 | A stored Cross-site Scripting (XSS) vulnerability affecting 3D Markup in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE… |
| CVE-2025-0828 | 3E 3dexperience Enovia 3ds | 5.4 | Mar 17 | A stored Cross-site Scripting (XSS) vulnerability affecting Engineering Release in ENOVIA Product Engineering Specialist from Release 3DEXPERIENCE R2022x through Release… |
| CVE-2025-0826 | 3E 3dexperience Enovia 3ds | 5.4 | Mar 17 | A stored Cross-site Scripting (XSS) vulnerability affecting 3D Navigate in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE… |
| CVE-2025-0601 | 3E 3dexperience Enovia 3ds | 5.4 | Mar 17 | A stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release… |
| CVE-2025-0600 | 3E 3dexperience Enovia 3ds | 5.4 | Mar 17 | A stored Cross-site Scripting (XSS) vulnerability affecting Product Explorer in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to… |
| CVE-2025-0599 | 3E 3dexperience Enovia 3ds | 5.4 | Mar 17 | A stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to… |
| CVE-2025-0598 | 3E 3dexperience Enovia 3ds | 5.4 | Mar 17 | A stored Cross-site Scripting (XSS) vulnerability affecting Relations in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE… |
| CVE-2025-0596 | 3E 3dexperience Enovia 3ds | 5.4 | Mar 17 | A stored Cross-site Scripting (XSS) vulnerability affecting Bookmark Editor in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute… |
| CVE-2024-12092 | 3E 3dexperience Enovia 3ds | 5.4 | Dec 16 | A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script… |
| CVE-2024-12091 | 3E 3dexperience Enovia 3ds | 5.4 | Dec 16 | A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an… |
| CVE-2024-12090 | 3E 3dexperience Enovia 3ds | 5.4 | Dec 16 | A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script… |
| CVE-2024-12089 | 3E 3dexperience Enovia 3ds | 5.4 | Dec 16 | A stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an… |
| CVE-2024-6380 | 3E 3dexperience Enovia 3ds | 5.4 | Oct 16 | A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows… |
| CVE-2024-7736 | 3E 3dexperience Enovia 3ds | 5.4 | Sep 19 | A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows… |
| CVE-2024-8004 | 3E 3dexperience Enovia 3ds | 5.4 | Sep 2 | Stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x |
| CVE-2024-7939 | 3D 3dexperience 3ds | 5.4 | Sep 2 | Stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2024x |
| CVE-2024-7938 | 3D 3dexperience 3ds | 5.4 | Sep 2 | Stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x |
| CVE-2024-7932 | 3D 3dexperience 3ds | 5.4 | Sep 2 | Stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer on Release 3DEXPERIENCE R2024x |
| CVE-2024-6379 | 3D 3dexperience 3ds | 6.1 | Aug 20 | A reflected Cross-site Scripting (XSS) vulnerability affecting 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute… |
| CVE-2024-6378 | 3D 3dexperience 3ds | 5.4 | Aug 20 | A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows… |
| CVE-2024-6377 | 3D 3dexperience 3ds | 6.1 | Aug 20 | An URL redirection to untrusted site (open redirect) vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an… |
| CVE-2024-1847 | SO Solidworks 3ds | 7.8 | Feb 28 | Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Variable, Use-After-Free… |
| CVE-2024-0935 | DA Delmia Apriso 3ds | 7.5 | Feb 1 | Insertion of Sensitive Information into Log File vulnerabilities are affecting DELMIA Apriso Release 2019 through Release 2024 |
| CVE-2023-6078 | BM Biovia Materials Studio 3ds | 9.8 | Feb 1 | An OS Command Injection vulnerability exists in BIOVIA Materials Studio products from Release BIOVIA 2021 through Release BIOVIA 2023 |
| CVE-2023-3589 | TC Teamwork Cloud NO Magic Release 3ds | 7.5 | Oct 9 | A Cross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x could allow with some very specific… |
| CVE-2023-3588 | TC Teamwork Cloud NO Magic Release 3ds | 5.4 | Sep 13 | A stored Cross-site Scripting (XSS) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x allows an attacker to execute arbitrary… |
| CVE-2023-1997 | 3D 3dexperience 3ds | 8.8 | Aug 28 | An OS Command Injection vulnerability exists in SIMULIA 3DOrchestrate from Release 3DEXPERIENCE R2021x through Release 3DEXPERIENCE R2023x |
| CVE-2023-2763 | 3S 3dexperience Solidworks 3ds | 7.8 | Jul 12 | Use-After-Free, Out-of-bounds Write and Heap-based Buffer Overflow vulnerabilities exist in the DWG and DXF file reading procedure in SOLIDWORKS Desktop from Release SOLIDWORKS… |
| CVE-2023-2762 | 3S 3dexperience Solidworks 3ds | 7.8 | Jul 12 | A Use-After-Free vulnerability in SLDPRT file reading procedure exists in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023 |
| CVE-2023-1996 | 3D 3dexperience 3ds | 6.1 | May 19 | A reflected Cross-site Scripting (XSS) vulnerability in Release 3DEXPERIENCE R2018x through Release 3DEXPERIENCE R2023x allows an attacker to execute arbitrary script code |
| CVE-2023-2141 | DA Delmia Apriso 3ds | 8.8 | Apr 21 | An unsafe .NET object deserialization in DELMIA Apriso Release 2017 through Release 2022 could lead to post-authentication remote code execution |
| CVE-2023-2140 | DA Delmia Apriso 3ds | 7.5 | Apr 21 | A Server-Side Request Forgery vulnerability in DELMIA Apriso Release 2017 through Release 2022 could allow an unauthenticated attacker to issue requests to arbitrary hosts on… |
| CVE-2023-2139 | DA Delmia Apriso 3ds | 6.1 | Apr 21 | A reflected Cross-site Scripting (XSS) Vulnerability in DELMIA Apriso Release 2017 through Release 2022 allows an attacker to execute arbitrary script code |
| CVE-2023-1288 | EL Enovia Live Collaboration 3ds | 7.5 | Mar 9 | An XML External Entity injection (XXE) vulnerability in ENOVIA Live Collaboration V6R2013xE allows an attacker to read local files on the server |
| CVE-2023-1287 | EL Enovia Live Collaboration 3ds | 9.8 | Mar 9 | An XSL template vulnerability in ENOVIA Live Collaboration V6R2013xE allows Remote Code Execution |
| CVE-2020-25507 | TC Teamwork Cloud 3ds | 7.8 | Dec 28 | An incorrect permission assignment during the installation script of TeamworkCloud 18.0 thru 19.0 allows a local unprivileged attacker to execute arbitrary code as root |
| CVE-2014-2072 | CA Catia 3ds | 9.8 | Jan 8 | Dassault Systemes Catia V5-6R2013: Stack Buffer Overflow due to inadequate boundary checks |
| CVE-2014-2073 | CA Catia 3ds | 9.8 | Apr 10 | Stack-based buffer overflow in Dassault Systemes CATIA V5-6R2013 allows remote attackers to execute arbitrary code via a crafted packet, related to "CATV5_Backbone_Bus." |
| CVE-2013-4721 | P3 Push2rss 3ds 3ds | – | Jun 27 | SQL injection vulnerability in the RSS feed from records extension 1.0.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors |
| CVE-2012-4883 | 3C 3dvia Composer 3ds | – | Sep 7 | Multiple untrusted search path vulnerabilities in 3DVIA Composer V6R2012 HF1 Build 6.8.1.1652 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2)… |
| CVE-2012-4882 | 3X 3d Xml Player 3ds | – | Sep 7 | Multiple untrusted search path vulnerabilities in 3D XML Player 6.212.13.12076 allow local users to gain privileges via a Trojan horse (1) dwmapi.dll or (2) JT0DevPhase.dll file… |
