CVE-2023-5599: Dassault 3dswymer 3dexperience 2022

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2023x allows an attacker to execute arbitrary script code.

Affected products

• Dassault 3dswymer 3dexperience 2022: version fp.cfa.2337 only
• Dassault 3dswymer 3dexperience 2023: version fp.cfa.2333 only

Published 2023-11-21. Last modified 2026-06-17.