3dexperience vulnerabilities

3 known vulnerabilities in 3dexperience from 3ds. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  DELMIA Factory Resource Manager: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-10559Mar 31, 2026Dassault Systèmes

  A Path Traversal vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to read or write files in specific directories on the server.

• 9.4 Critical severity

  Documentation server: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-1624Mar 1, 2024Dassault SystèmesEPSS 2.13%

  An OS Command Injection vulnerability affecting documentation server on 3DEXPERIENCE from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x, SIMULIA Abaqus from Release 2022 through Release 2024, SIMULIA Isight from Release 2022 through Release 2

• 8.8 High severity

  SIMULIA 3DOrchestrate: Improper Neutralization of Special Elements used in an OS Command

  CVE-2023-1997Aug 28, 2023Dassault SystèmesEPSS 1.88%

  An OS Command Injection vulnerability exists in SIMULIA 3DOrchestrate from Release 3DEXPERIENCE R2021x through Release 3DEXPERIENCE R2023x. A specially crafted HTTP request can lead to arbitrary command execution.