Security Advisory
CVE-2025-12956
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
A reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in users browser session.