Stored Cross-site Scripting (XSS) vulnerability affecting Process Experience Studio in DELMIA Service Process Engineer from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x_CVE-2026-9024

{
    "lastseen": "",
    "description": "A Stored Cross-site Scripting (XSS) vulnerability affecting Process Experience Studio in DELMIA Service Process Engineer from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x could allow an attacker to execute arbitrary script code in user's browser session.",
    "published": "2026-06-01T08:21:06.579Z",
    "modified": "2026-06-01T08:21:06.579Z",
    "type": "cve",
    "title": "Stored Cross-site Scripting (XSS) vulnerability affecting Process Experience Studio in DELMIA Service Process Engineer from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x",
    "source": "3DS",
    "references": "https://www.3ds.com/trust-center/security/security-advisories/cve-2026-9024",
    "id": "CVE-2026-9024",
    "bulletinFamily": "",
    "cwe": [
        "CWE-79"
    ],
    "cvelist": null,
    "sourceData": "Dassault Syst\u00e8mes DELMIA Service Process Engineer Release 3DEXPERIENCE R2024x Golden\nDassault Syst\u00e8mes DELMIA Service Process Engineer Release 3DEXPERIENCE R2025x Golden\nDassault Syst\u00e8mes DELMIA Service Process Engineer Release 3DEXPERIENCE R2026x Golden",
    "sourceHref": "",
    "cvss": {
        "score": 8.7,
        "severity": "HIGH",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "DELMIA Service Process Engineer",
    "version": "Release 3DEXPERIENCE R2024x Golden",
    "vendor": "Dassault Syst\u00e8mes",
    "ai_description": "Stored Cross-site Scripting (XSS) vulnerability in DELMIA Service Process Engineer",
    "ai_severity": "High",
    "ai_vendor": "Dassault Syst\u00e8mes",
    "ai_product": "DELMIA Service Process Engineer",
    "ai_version": "Release 3DEXPERIENCE R2024x Golden, Release 3DEXPERIENCE R2025x Golden, Release 3DEXPERIENCE R2026x Golden",
    "ai_score": 8.7
}