DS
Vendor
Dassault Systèmes
56
CVEs
3
On KEV
7
New 30D
Products
TE8.8
Tuleap Enterprise Edition
Dassault Systèmes
9 CVEs0 on KEV6 new
GG9.9
GEOVIA Geospatial Data Manager
Dassault Systèmes
1 CVEs0 on KEV1 new
DA9.8
DELMIA Apriso
Dassault Systèmes
4 CVEs3 on KEV0 new
SE7.8
SOLIDWORKS eDrawings
Dassault Systèmes
14 CVEs0 on KEV0 new
3D9.3
3DSwymer
Dassault Systèmes
6 CVEs0 on KEV0 new
EC5.4
ENOVIA Collaborative Industry Innovator
Dassault Systèmes
4 CVEs0 on KEV0 new
DF9.1
DELMIA Factory Resource Manager
Dassault Systèmes
2 CVEs0 on KEV0 new
DS8.7
DELMIA Service Process Engineer
Dassault Systèmes
2 CVEs0 on KEV0 new
SL10.0
Station Launcher App in 3DEXPERIENCE platform
Dassault Systèmes
2 CVEs0 on KEV0 new
BW8.1
BIOVIA Workbook
Dassault Systèmes
1 CVEs0 on KEV0 new
EP5.4
ENOVIA Product Manager
Dassault Systèmes
1 CVEs0 on KEV0 new
ES5.4
ENOVIA Specification Manager
Dassault Systèmes
1 CVEs0 on KEV0 new
EW8.7
ENOVIAvpm Web Access
Dassault Systèmes
1 CVEs0 on KEV0 new
MC9.8
Magic Collaboration Studio
Dassault Systèmes
1 CVEs0 on KEV0 new
SE10.0
SIMULIA Execution Engine
Dassault Systèmes
1 CVEs0 on KEV0 new
SD7.8
SOLIDWORKS Desktop
Dassault Systèmes
1 CVEs0 on KEV0 new
SV9.8
SOLIDWORKS Visualize
Dassault Systèmes
1 CVEs0 on KEV0 new
TC9.8
Teamwork Cloud - Business Edition
Dassault Systèmes
1 CVEs0 on KEV0 new
TC9.8
Teamwork Cloud - Business Pro Edition
Dassault Systèmes
1 CVEs0 on KEV0 new
TC9.8
Teamwork Cloud - Enterprise Edition
Dassault Systèmes
1 CVEs0 on KEV0 new
TC9.8
Teamwork Cloud - Standard Edition
Dassault Systèmes
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-105412 | TE Tuleap Enterprise Edition Dassault Systèmes | 7.1 | Oct 12 | SQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5 |
| CVE-2026-105411 | TE Tuleap Enterprise Edition Dassault Systèmes | 8.1 | Oct 12 | Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 |
| CVE-2026-105410 | TE Tuleap Enterprise Edition Dassault Systèmes | 8.7 | Oct 12 | Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 |
| CVE-2026-105409 | TE Tuleap Enterprise Edition Dassault Systèmes | 8.7 | Oct 12 | Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 |
| CVE-2026-105408 | TE Tuleap Enterprise Edition Dassault Systèmes | 8.7 | Oct 12 | Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 |
| CVE-2026-105407 | TE Tuleap Enterprise Edition Dassault Systèmes | 8.8 | Oct 12 | OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 |
| CVE-2026-84154 | GG GEOVIA Geospatial Data Manager Dassault Systèmes | 9.9 | Sep 29 | Code Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x |
| CVE-2026-84285 | TE Tuleap Enterprise Edition Dassault Systèmes | 8.8 | Sep 21 | OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.3 through 17.5 |
| CVE-2026-16279 | 3D 3DSwymer Dassault Systèmes | 9.3 | Aug 27 | Improper Authorization vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x |
| CVE-2026-19851 | TE Tuleap Enterprise Edition Dassault Systèmes | 7.7 | Aug 25 | Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 |
| CVE-2026-17061 | SE SIMULIA Execution Engine Dassault Systèmes | 10.0 | Aug 11 | Deserialization of Untrusted Data Vulnerability in SIMULIA Execution Engine from Release 2023 through Release 2026 |
| CVE-2026-11756 | SL Station Launcher App in 3DEXPERIENCE platform Dassault Systèmes | 10.0 | Jul 28 | Deserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x |
| CVE-2026-14165 | TE Tuleap Enterprise Edition Dassault Systèmes | 7.5 | Jul 13 | Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 |
| CVE-2026-9695 | DA DELMIA Apriso Dassault Systèmes | 9.8 | Jul 8 | Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026 |
| CVE-2026-5120 | BW BIOVIA Workbook Dassault Systèmes | 8.1 | Jul 1 | Race Condition vulnerability affecting BIOVIA Workbook from Release 2021 through Release 2026 |
| CVE-2026-10094 | SV SOLIDWORKS Visualize Dassault Systèmes | 9.8 | Jun 17 | Path Traversal vulnerability affecting SOLIDWORKS Visualize from SOLIDWORKS Desktop Release 2024 through SOLIDWORKS Desktop Release 2026 |
| CVE-2026-9024 | DS DELMIA Service Process Engineer Dassault Systèmes | 8.7 | Jun 1 | Stored Cross-site Scripting (XSS) vulnerability affecting Process Experience Studio in DELMIA Service Process Engineer from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x |
| CVE-2026-7858 | TC Teamwork Cloud - Enterprise Edition Dassault Systèmes | 9.8 | Jun 1 | Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x through CATIA Magic Release 2026x |
| CVE-2025-10559 | DF DELMIA Factory Resource Manager Dassault Systèmes | 9.1 | Mar 31 | Path Traversal vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x |
| CVE-2025-10553 | DF DELMIA Factory Resource Manager Dassault Systèmes | 5.4 | Mar 31 | Stored Cross-site Scripting (XSS) vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x |
| CVE-2025-10551 | EC ENOVIA Collaborative Industry Innovator Dassault Systèmes | 5.4 | Mar 31 | Stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x |
| CVE-2026-3476 | SD SOLIDWORKS Desktop Dassault Systèmes | 7.8 | Mar 16 | Code Injection vulnerability affecting SOLIDWORKS Desktop from Release 2025 through Release 2026 |
| CVE-2026-2101 | EW ENOVIAvpm Web Access Dassault Systèmes | 8.7 | Feb 16 | Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIAvpm Web Access from ENOVIAvpm Version 1 Release 16 through ENOVIAvpm Version 1 Release 19 |
| CVE-2026-1335 | SE SOLIDWORKS eDrawings Dassault Systèmes | 7.8 | Feb 16 | Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 |
| CVE-2026-1334 | SE SOLIDWORKS eDrawings Dassault Systèmes | 7.8 | Feb 16 | Out-Of-Bounds Read vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 |
| CVE-2026-1333 | SE SOLIDWORKS eDrawings Dassault Systèmes | 7.8 | Feb 16 | Use of Uninitialized Variable vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 |
| CVE-2026-1284 | SE SOLIDWORKS eDrawings Dassault Systèmes | 7.8 | Jan 26 | Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 |
| CVE-2026-1283 | SE SOLIDWORKS eDrawings Dassault Systèmes | 7.8 | Jan 26 | Heap-based Buffer Overflow vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 |
| CVE-2025-12956 | EC ENOVIA Collaborative Industry Innovator Dassault Systèmes | 5.4 | Dec 8 | Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x |
| CVE-2025-10555 | DS DELMIA Service Process Engineer Dassault Systèmes | 8.7 | Nov 24 | Stored Cross-site Scripting (XSS) vulnerability affecting Service Items Management in DELMIA Service Process Engineer on Release 3DEXPERIENCE R2025x |
| CVE-2025-10554 | EP ENOVIA Product Manager Dassault Systèmes | 5.4 | Nov 24 | Stored Cross-site Scripting (XSS) vulnerability affecting Requirements in ENOVIA Product Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x |
| CVE-2025-10558 | 3D 3DSwymer Dassault Systèmes | 6.1 | Oct 13 | Stored Cross-site Scripting (XSS) vulnerability affecting 3DSearch in 3DSwymer on Release 3DEXPERIENCE R2025x |
| CVE-2025-10557 | EC ENOVIA Collaborative Industry Innovator Dassault Systèmes | 5.4 | Oct 13 | Stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x |
| CVE-2025-10556 | ES ENOVIA Specification Manager Dassault Systèmes | 5.4 | Oct 13 | Stored Cross-site Scripting (XSS) vulnerability affecting Specification Management in ENOVIA Specification Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x |
| CVE-2025-10552 | 3D 3DSwymer Dassault Systèmes | 6.1 | Oct 13 | Stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2025x |
| CVE-2025-9976 | SL Station Launcher App in 3DEXPERIENCE platform Dassault Systèmes | 9.0 | Oct 13 | OS Command Injection vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x |
| CVE-2025-9450 | SE SOLIDWORKS eDrawings Dassault Systèmes | 7.8 | Sep 17 | Use of Uninitialized Variable vulnerability affecting the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 |
| CVE-2025-9449 | SE SOLIDWORKS eDrawings Dassault Systèmes | 7.8 | Sep 17 | Use After Free vulnerability affecting the PAR file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 |
| CVE-2025-9447 | SE SOLIDWORKS eDrawings Dassault Systèmes | 7.8 | Sep 17 | Out-Of-Bounds Read affecting the PAR file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 |
| CVE-2025-6205 In wildKEV | DA DELMIA Apriso Dassault Systèmes | 9.1 | Aug 4 | Missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 |
| CVE-2025-6204 In wildKEV | DA DELMIA Apriso Dassault Systèmes | 8.0 | Aug 4 | Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 |
| CVE-2025-7042 | SE SOLIDWORKS eDrawings Dassault Systèmes | 7.8 | Jul 15 | Use After Free vulnerability exists in the IPT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 |
| CVE-2025-6974 | SE SOLIDWORKS eDrawings Dassault Systèmes | 7.8 | Jul 15 | Use of Uninitialized Variable vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 |
| CVE-2025-6973 | SE SOLIDWORKS eDrawings Dassault Systèmes | 7.8 | Jul 15 | Use After Free vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 |
| CVE-2025-6972 | SE SOLIDWORKS eDrawings Dassault Systèmes | 7.8 | Jul 15 | Use After Free vulnerability exists in the CATPRODUCT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 |
| CVE-2025-6971 | SE SOLIDWORKS eDrawings Dassault Systèmes | 7.8 | Jul 15 | Use After Free vulnerability exists in the CATPRODUCT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 |
| CVE-2025-0831 | SE SOLIDWORKS eDrawings Dassault Systèmes | 7.8 | Jul 15 | Out-Of-Bounds Read vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 |
| CVE-2025-5086 In wildKEV | DA DELMIA Apriso Dassault Systèmes | 9.0 | Jun 2 | Deserialization of Untrusted Data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 |
| CVE-2024-8004 | EC ENOVIA Collaborative Industry Innovator Dassault Systèmes | 5.4 | Sep 2 | Stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x |
| CVE-2024-7939 | 3D 3DSwymer Dassault Systèmes | 5.4 | Sep 2 | Stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2024x |
| CVE-2024-7938 | 3D 3DSwymer Dassault Systèmes | 5.4 | Sep 2 | Stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x |
| CVE-2024-7932 | 3D 3DSwymer Dassault Systèmes | 5.4 | Sep 2 | Stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer on Release 3DEXPERIENCE R2024x |
