CVE-2026-9024

HIGH CVSS 8.7 View on NVD ↗

Description

A Stored Cross-site Scripting (XSS) vulnerability affecting Process Experience Studio in DELMIA Service Process Engineer from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x could allow an attacker to execute arbitrary script code in user's browser session.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

References

https://www.3ds.com/trust-center/security/security-advisories/cve-2026-9024

Published: Jun 01, 2026 09:16 UTC Modified: Jun 01, 2026 17:57 UTC