CVE-2023-1996 is a medium-severity vulnerability affecting 3DEXPERIENCE software versions R2018x to R2023x. This reflected Cross-site Scripting (XSS) vulnerability allows an attacker to execute arbitrary script code on affected systems. While specific system types are not mentioned, it can be inferred that systems running the vulnerable 3DEXPERIENCE software are at risk.

How do I know if I'm affected?

To determine if you're affected by the vulnerability, check if you're using 3DEXPERIENCE software versions R2018x to R2023x. This vulnerability is a reflected Cross-site Scripting (XSS) issue that allows attackers to execute arbitrary script code. If your system runs any of these software versions, you may be at risk. Note that this information does not pertain to Apple products, as they are not mentioned in the sources.

What should I do if I'm affected?

If you're affected by the vulnerability, follow these steps. First, check if you're using 3DEXPERIENCE software versions R2018x to R2023x. Visit the Dassault Systèmes Security Advisories page for information on the vulnerability. Access their Support Knowledge Base for detailed mitigation steps and available updates or patches.

Is CVE-2023-1996 in CISA’s Known Exploited Vulnerabilities Catalog?

Yes, it is in CISA's Known Exploited Vulnerabilities Catalog. The CVE-2023-1996 vulnerability is a known exploited vulnerability in CISA's catalog. It's a reflected Cross-site Scripting (XSS) issue affecting 3DEXPERIENCE software versions R2018x to R2023x, allowing attackers to execute arbitrary script code. The vulnerability was added to the National Vulnerability Database on May 19, 2023. No specific due date or required action is provided, but users should refer to available advisories and solutions to mitigate the risk.

Weakness enumeration

The Weakness Enumeration for CVE-2023-1996 is identified as CWE-79, which refers to improper neutralization of input during web page generation, commonly known as Cross-site Scripting (XSS).

For more details

CVE-2023-1996 is a medium-severity reflected XSS vulnerability affecting 3DEXPERIENCE software versions R2018x to R2023x, allowing attackers to execute arbitrary script code. For a comprehensive understanding of this vulnerability, including its description, severity, technical details, and known affected software configurations, visit the NVD page or the links below.

• NVD - CVE-2023-1996

• Dassault Systèmes Security Advisories