3DSwymer vulnerabilities

5 known vulnerabilities in 3DSwymer from Dassault Systèmes. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  3DSwymer: Improper Authorization

  CVE-2026-16279Aug 27, 2026Dassault Systèmes

  An Improper Authorization vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x could allow an attacker to gain access to some user accounts.

• 8.7 High severity

  3DSwymer: Improper Neutralization of Input During Web Page Generation

  CVE-2025-0827Mar 17, 2025Dassault Systèmes

  A stored Cross-site Scripting (XSS) vulnerability affecting 3DPlay in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.

• 8.7 High severity

  3DSwymer: Improper Neutralization of Input During Web Page Generation

  CVE-2025-0595Mar 17, 2025Dassault Systèmes

  A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.

• 7.7 High severity

  3DSwymer: Authorization Bypass Through User-Controlled Key

  CVE-2024-8040Oct 16, 2024Dassault Systèmes

  An authorization bypass through user-controlled key vulnerability affecting 3DSwym in 3DSwymer on Release 3DEXPERIENCE R2024x allows an authenticated attacker to access some unauthorized data.

• 8.7 High severity

  3DSwymer: Improper Neutralization of Input During Web Page Generation

  CVE-2024-7737Sep 19, 2024Dassault Systèmes

  A stored Cross-site Scripting (XSS) vulnerability affecting 3DSwym in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.