CVE-2026-9024highCWE-79

CVE-2026-9024: falha de alta gravidade em Dassault Systèmes DELMIA Service Process…

Stored Cross-site Scripting (XSS) vulnerability affecting Process Experience Studio in DELMIA Service Process Engineer from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x

Publicada em

Seguir esta CVE+ Monitorar DELMIA Service Process Engineer

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.7epss 0.2%
A Stored Cross-site Scripting (XSS) vulnerability affecting Process Experience Studio in DELMIA Service Process Engineer from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x could allow an attacker to execute arbitrary script code in user's browser session.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
Produtos afetados
Dassault Systèmes · DELMIA Service Process Engineer
CVEs relacionadas — Dassault Systèmes DELMIA Service Process…

No mesmo produto, das mais perigosas para as menos.

CVE-2025-10555HIGHStored Cross-site Scripting (XSS) vulnerability affecting Service Items Management in DELMIA Service Process Engineer on Release 3DEXPERIENCE R2025xEPSS 0.3%