3D
Vendor
3ds
71
CVEs
3
On KEV
0
New 30D
Products
DA9.1
Delmia Apriso
3ds
9 CVEs3 on KEV0 new
3E5.4
3dexperience Enovia
3ds
22 CVEs0 on KEV0 new
3D9.4
3dexperience
3ds
12 CVEs0 on KEV0 new
3S7.8
3dexperience Solidworks
3ds
3 CVEs0 on KEV0 new
ED7.8
Edrawings
3ds
3 CVEs0 on KEV0 new
SE7.8
Solidworks Edrawings
3ds
3 CVEs0 on KEV0 new
3D6.1
3dswymer
3ds
2 CVEs0 on KEV0 new
CA9.8
Catia
3ds
2 CVEs0 on KEV0 new
EL9.8
Enovia Live Collaboration
3ds
2 CVEs0 on KEV0 new
SO7.8
Solidworks
3ds
2 CVEs0 on KEV0 new
TC7.5
Teamwork Cloud NO Magic Release
3ds
2 CVEs0 on KEV0 new
3X–
3d Xml Player
3ds
1 CVEs0 on KEV0 new
3C–
3dvia Composer
3ds
1 CVEs0 on KEV0 new
BM9.8
Biovia Materials Studio
3ds
1 CVEs0 on KEV0 new
CC9.4
Catia Composer
3ds
1 CVEs0 on KEV0 new
ES–
Enovia Smarteam
3ds
1 CVEs0 on KEV0 new
P3–
Push2rss 3ds
3ds
1 CVEs0 on KEV0 new
SA9.4
Simulia Abaqus
3ds
1 CVEs0 on KEV0 new
SI9.4
Simulia Insight
3ds
1 CVEs0 on KEV0 new
TC7.8
Teamwork Cloud
3ds
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-10559 | 3D 3dexperience 3ds | 9.1 | Mar 31 | Path Traversal vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x |
| CVE-2025-10553 | 3D 3dexperience 3ds | 5.4 | Mar 31 | Stored Cross-site Scripting (XSS) vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x |
| CVE-2025-10551 | 3D 3dexperience 3ds | 5.4 | Mar 31 | Stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x |
| CVE-2026-3476 | SO Solidworks 3ds | 7.8 | Mar 16 | Code Injection vulnerability affecting SOLIDWORKS Desktop from Release 2025 through Release 2026 |
| CVE-2026-1335 | SE Solidworks Edrawings 3ds | 7.8 | Feb 16 | Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 |
| CVE-2026-1334 | SE Solidworks Edrawings 3ds | 7.8 | Feb 16 | Out-Of-Bounds Read vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 |
| CVE-2026-1333 | SE Solidworks Edrawings 3ds | 7.8 | Feb 16 | Use of Uninitialized Variable vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 |
| CVE-2025-12956 | 3E 3dexperience Enovia 3ds | 5.4 | Dec 8 | Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x |
| CVE-2025-10554 | 3E 3dexperience Enovia 3ds | 5.4 | Nov 24 | Stored Cross-site Scripting (XSS) vulnerability affecting Requirements in ENOVIA Product Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x |
| CVE-2025-10558 | 3D 3dswymer 3ds | 6.1 | Oct 13 | Stored Cross-site Scripting (XSS) vulnerability affecting 3DSearch in 3DSwymer on Release 3DEXPERIENCE R2025x |
| CVE-2025-10557 | 3E 3dexperience Enovia 3ds | 5.4 | Oct 13 | Stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x |
| CVE-2025-10556 | 3E 3dexperience Enovia 3ds | 5.4 | Oct 13 | Stored Cross-site Scripting (XSS) vulnerability affecting Specification Management in ENOVIA Specification Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x |
| CVE-2025-10552 | 3D 3dswymer 3ds | 6.1 | Oct 13 | Stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2025x |
| CVE-2025-6205 In wildKEV | DA Delmia Apriso 3ds | 9.1 | Aug 4 | Missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 |
| CVE-2025-6204 In wildKEV | DA Delmia Apriso 3ds | 8.0 | Aug 4 | Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 |
| CVE-2025-5086 In wildKEV | DA Delmia Apriso 3ds | 9.0 | Jun 2 | Deserialization of Untrusted Data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 |
| CVE-2025-0833 | 3E 3dexperience Enovia 3ds | 5.4 | Mar 17 | Stored Cross-site Scripting (XSS) vulnerability affecting Route Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x |
| CVE-2025-0832 | 3E 3dexperience Enovia 3ds | 5.4 | Mar 17 | Stored Cross-site Scripting (XSS) vulnerability affecting Project Gantt in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x |
| CVE-2025-0830 | 3E 3dexperience Enovia 3ds | 5.4 | Mar 17 | Stored Cross-site Scripting (XSS) vulnerability affecting Meeting Management in ENOVIA Change Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x |
| CVE-2025-0829 | 3E 3dexperience Enovia 3ds | 5.4 | Mar 17 | Stored Cross-site Scripting (XSS) vulnerability affecting 3D Markup in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x |
| CVE-2025-0828 | 3E 3dexperience Enovia 3ds | 5.4 | Mar 17 | Stored Cross-site Scripting (XSS) vulnerability affecting Engineering Release in ENOVIA Product Engineering Specialist from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x |
| CVE-2025-0826 | 3E 3dexperience Enovia 3ds | 5.4 | Mar 17 | Stored Cross-site Scripting (XSS) vulnerability affecting 3D Navigate in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x |
| CVE-2025-0601 | 3E 3dexperience Enovia 3ds | 5.4 | Mar 17 | Stored Cross-site Scripting (XSS) vulnerability affecting Issue Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x |
| CVE-2025-0600 | 3E 3dexperience Enovia 3ds | 5.4 | Mar 17 | Stored Cross-site Scripting (XSS) vulnerability affecting Product Explorer in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x |
| CVE-2025-0599 | 3E 3dexperience Enovia 3ds | 5.4 | Mar 17 | Stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x |
| CVE-2025-0598 | 3E 3dexperience Enovia 3ds | 5.4 | Mar 17 | Stored Cross-site Scripting (XSS) vulnerability affecting Relations in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x |
| CVE-2025-0596 | 3E 3dexperience Enovia 3ds | 5.4 | Mar 17 | Stored Cross-site Scripting (XSS) vulnerability affecting Bookmark Editor in ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x |
| CVE-2024-12092 | 3E 3dexperience Enovia 3ds | 5.4 | Dec 16 | Stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x |
| CVE-2024-12091 | 3E 3dexperience Enovia 3ds | 5.4 | Dec 16 | Stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x |
| CVE-2024-12090 | 3E 3dexperience Enovia 3ds | 5.4 | Dec 16 | Stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator on Release 3DEXPERIENCE R2024x |
| CVE-2024-12089 | 3E 3dexperience Enovia 3ds | 5.4 | Dec 16 | Stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x |
| CVE-2024-6380 | 3E 3dexperience Enovia 3ds | 5.4 | Oct 16 | Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x |
| CVE-2024-7736 | 3E 3dexperience Enovia 3ds | 5.4 | Sep 19 | Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x |
| CVE-2024-8004 | 3E 3dexperience Enovia 3ds | 5.4 | Sep 2 | Stored Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x |
| CVE-2024-7939 | 3D 3dexperience 3ds | 5.4 | Sep 2 | Stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2024x |
| CVE-2024-7938 | 3D 3dexperience 3ds | 5.4 | Sep 2 | Stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2024x |
| CVE-2024-7932 | 3D 3dexperience 3ds | 5.4 | Sep 2 | Stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer on Release 3DEXPERIENCE R2024x |
| CVE-2024-6377 | 3D 3dexperience 3ds | 6.1 | Aug 20 | URL redirection to untrusted site (open redirect) vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x |
| CVE-2024-6378 | 3D 3dexperience 3ds | 5.4 | Aug 20 | Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x |
| CVE-2024-6379 | 3D 3dexperience 3ds | 6.1 | Aug 20 | Reflected Cross-site Scripting (XSS) vulnerability affecting 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x |
| CVE-2024-3300 | DA Delmia Apriso 3ds | 9.0 | May 30 | Pre-authentication Unsafe .NET object deserialization vulnerability affecting DELMIA Apriso Release 2019 through Release 2024 |
| CVE-2024-3301 | DA Delmia Apriso 3ds | 8.5 | May 30 | Post-authentication Unsafe .NET object deserialization vulnerability affecting DELMIA Apriso Release 2019 through Release 2024 |
| CVE-2024-3299 | ED Edrawings 3ds | 7.8 | Apr 4 | Out-Of-Bounds Write, Use of Uninitialized Resource and Use-After-Free vulnerabilities exist in the SLDDRW and SLDPRT file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024 |
| CVE-2024-3298 | ED Edrawings 3ds | 7.8 | Apr 4 | Out-Of-Bounds Write and Type Confusion vulnerabilities exist in the DWG and DXF file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024 |
| CVE-2024-1848 | 3S 3dexperience Solidworks 3ds | 7.8 | Mar 22 | Multiple vulnerabilities exist in file reading procedure in SOLIDWORKS Desktop on Release SOLIDWORKS 2024 |
| CVE-2024-1624 | 3D 3dexperience 3ds | 9.4 | Mar 1 | OS Command Injection vulnerability affecting documentation server on certain Releases of 3DEXPERIENCE, SIMULIA Abaqus, SIMULIA Isight and CATIA Composer |
| CVE-2024-1847 | SO Solidworks 3ds | 7.8 | Feb 28 | Multiple vulnerabilities exist in file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024 |
| CVE-2024-0935 | DA Delmia Apriso 3ds | 7.5 | Feb 1 | Insertion of Sensitive Information into Log File vulnerabilities affecting DELMIA Apriso Release 2019 through Release 2024 |
| CVE-2023-6078 | BM Biovia Materials Studio 3ds | 9.8 | Feb 1 | OS Command Injection vulnerability affecting BIOVIA Materials Studio products from Release BIOVIA 2021 through Release BIOVIA 2023 |
| CVE-2023-3589 | TC Teamwork Cloud NO Magic Release 3ds | 7.5 | Oct 9 | Cross-Site Request Forgery (CSRF) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x |
| CVE-2023-3588 | TC Teamwork Cloud NO Magic Release 3ds | 5.4 | Sep 13 | Stored Cross-site Scripting (XSS) vulnerability affecting Teamwork Cloud from No Magic Release 2021x through No Magic Release 2022x |
| CVE-2023-1997 | 3D 3dexperience 3ds | 8.8 | Aug 28 | OS Command Injection vulnerability affecting SIMULIA 3DOrchestrate from Release 3DEXPERIENCE R2021x through Release 3DEXPERIENCE R2023x |
| CVE-2023-2763 | 3S 3dexperience Solidworks 3ds | 7.8 | Jul 12 | Use-After-Free, Out-of-bounds Write and Heap-based Buffer Overflow vulnerabilities exist in the DWG and DXF file reading procedure in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023 |
| CVE-2023-2762 | 3S 3dexperience Solidworks 3ds | 7.8 | Jul 12 | Use-After-Free vulnerability in SLDPRT file reading procedure affecting SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023 |
| CVE-2023-1996 | 3D 3dexperience 3ds | 6.1 | May 19 | Reflected Cross-site Scripting (XSS) vulnerability affecting Release 3DEXPERIENCE R2018x through Release 3DEXPERIENCE R2023x |
| CVE-2023-2141 | DA Delmia Apriso 3ds | 8.8 | Apr 21 | Unsafe .NET object deserialization affecting DELMIA Apriso Release 2017 through Release 2022 |
| CVE-2023-2140 | DA Delmia Apriso 3ds | 7.5 | Apr 21 | Server-Side Request Forgery vulnerability affecting DELMIA Apriso Release 2017 through Release 2022 |
| CVE-2023-2139 | DA Delmia Apriso 3ds | 6.1 | Apr 21 | Reflected Cross-site Scripting vulnerability affecting DELMIA Apriso Release 2017 through Release 2022 |
| CVE-2023-1288 | EL Enovia Live Collaboration 3ds | 7.5 | Mar 9 | ENOVIA Live Collaboration V6R2013xE is affected by an XML External Entity injection (XXE) vulnerability |
| CVE-2023-1287 | EL Enovia Live Collaboration 3ds | 9.8 | Mar 9 | ENOVIA Live Collaboration V6R2013xE is affected by an XSL template injection vulnerability |
