CVE-2026-9024highCWE-79

CVE-2026-9024: high-severity vulnerability in Dassault Systèmes DELMIA Service Process…

Stored Cross-site Scripting (XSS) vulnerability affecting Process Experience Studio in DELMIA Service Process Engineer from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x

Published

Follow this CVE+ Monitor DELMIA Service Process Engineer

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.7epss 0.2%
A Stored Cross-site Scripting (XSS) vulnerability affecting Process Experience Studio in DELMIA Service Process Engineer from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x could allow an attacker to execute arbitrary script code in user's browser session.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
Affected products
Dassault Systèmes · DELMIA Service Process Engineer
Related CVEs — Dassault Systèmes DELMIA Service Process…

In the same product, most dangerous first.

CVE-2025-10555HIGHStored Cross-site Scripting (XSS) vulnerability affecting Service Items Management in DELMIA Service Process Engineer on Release 3DEXPERIENCE R2025xEPSS 0.3%