CVE-2023-5598: Dassault 3dswymer 3dexperience 2022

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

Stored Cross-site Scripting (XSS) vulnerabilities affecting 3DSwym in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2023x allow an attacker to execute arbitrary script code.

Affected products

• Dassault 3dswymer 3dexperience 2022: version fp.cfa.2337 only
• Dassault 3dswymer 3dexperience 2023: version fp.cfa.2333 only

Published 2023-11-21. Last modified 2026-06-17.