CVE-2025-0602 is a high-severity stored Cross-site Scripting (XSS) vulnerability impacting the Compare feature within Dassault Systèmes' Collaborative Industry Innovator, specifically versions R2023x through R2025x. An authenticated attacker can exploit this with low complexity via the network to execute arbitrary script code in a user's browser session, leading to high confidentiality and integrity impacts. While the vulnerability has a high CVSS score of 8.7, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or community discussion surrounding it.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Dassault SystèMes | Collaborative Industry Innovator | >= Release 3DEXPERIENCE R2023x Golden, <= Release 3DEXPERIENCE R2023x.FP.CFA.2437, >= Release 3DEXPERIENCE R2024x Golden, <= Release 3DEXPERIENCE R2024x.FP.CFA.2432, Release 3DEXPERIENCE R2025x GoldenCNA affecteddefault unaffected |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.