Project Portfolio Manager vulnerabilities

2 known vulnerabilities in Project Portfolio Manager from Dassault Systèmes. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  Project Portfolio Manager: Improper Neutralization of Input During Web Page Generation

  CVE-2025-4987Jun 16, 2025Dassault Systèmes

  A stored Cross-site Scripting (XSS) vulnerability affecting Opportunity Management in Project Portfolio Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.

• 8.7 High severity

  Project Portfolio Manager: Improper Neutralization of Input During Web Page Generation

  CVE-2025-4985May 30, 2025Dassault Systèmes

  A stored Cross-site Scripting (XSS) vulnerability affecting Risk Management in Project Portfolio Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x allows an attacker to execute arbitrary script code in user's browser session.