Skip to content
Noroxi

3ds records

67 published records for vendor 3ds.

Researcher profile

Entered KEV
3 · 4.5%
Weaponized
3 · 4.5%
Pre-auth RCE
12
With a fix record
0%
Median publish → KEV
85 days

Records by year

  1. 18
  2. 20
  3. 23
  4. 24
  5. 25
  6. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

67 records
  • CVE-2025-5086
    95Now

    Deserialization of Untrusted Data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025

    CriticalCVSS 9.0KEVWeaponizedEPSS 97%

    3ds · delmia aprisoJun 2, 2025

  • CVE-2025-6205
    88Now

    Missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025

    CriticalCVSS 9.1KEVWeaponizedEPSS 73%

    3ds · delmia aprisoAug 4, 2025

  • CVE-2025-6204
    85Now

    Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025

    HighCVSS 8.0KEVWeaponizedEPSS 78%

    3ds · delmia aprisoAug 4, 2025

  • CVE-2014-2072
    41Plan

    Dassault Systemes Catia V5-6R2013: Stack Buffer Overflow due to inadequate boundary checks

    CriticalCVSS 9.8Proof of conceptEPSS 7%

    3ds · catiaJan 8, 2020

  • CVE-2014-2073
    40Plan

    Stack-based buffer overflow in Dassault Systemes CATIA V5-6R2013 allows remote attackers to execute arbitrary code via a crafted packet, rel

    CriticalCVSS 9.8No exploitEPSS 5%

    3ds · catiaApr 10, 2018

  • CVE-2023-6078
    39Monitor

    OS Command Injection vulnerability affecting BIOVIA Materials Studio products from Release BIOVIA 2021 through Release BIOVIA 2023

    CriticalCVSS 9.8No exploitEPSS 2%

    3ds · biovia materials studioFeb 1, 2024

  • CVE-2023-1287
    39Monitor

    ENOVIA Live Collaboration V6R2013xE is affected by an XSL template injection vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    3ds · enovia live collaborationMar 9, 2023

  • CVE-2024-1624
    38Monitor

    OS Command Injection vulnerability affecting documentation server on certain Releases of 3DEXPERIENCE, SIMULIA Abaqus, SIMULIA Isight and CATIA Composer

    CriticalCVSS 9.4No exploitEPSS 2%

    dassault systèmes · documentation serverMar 1, 2024

  • CVE-2024-3300
    37Monitor

    Pre-authentication Unsafe .NET object deserialization vulnerability affecting DELMIA Apriso Release 2019 through Release 2024

    CriticalCVSS 9.0Proof of conceptEPSS 3%

    dassault systèmes · delmia aprisoMay 30, 2024

  • CVE-2023-1997
    36Monitor

    OS Command Injection vulnerability affecting SIMULIA 3DOrchestrate from Release 3DEXPERIENCE R2021x through Release 3DEXPERIENCE R2023x

    HighCVSS 8.8No exploitEPSS 2%

    3ds · 3dexperienceAug 28, 2023

  • CVE-2025-10559
    36Monitor

    Path Traversal vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIE

    CriticalCVSS 9.1No exploitEPSS 0%

    3ds · 3dexperienceMar 31, 2026

  • CVE-2023-2141
    35Monitor

    Unsafe .NET object deserialization affecting DELMIA Apriso Release 2017 through Release 2022

    HighCVSS 8.8No exploitEPSS 1%

    3ds · delmia aprisoApr 21, 2023

  • CVE-2024-3301
    34Monitor

    Post-authentication Unsafe .NET object deserialization vulnerability affecting DELMIA Apriso Release 2019 through Release 2024

    HighCVSS 8.5No exploitEPSS 1%

    dassault systèmes · delmia aprisoMay 30, 2024

  • CVE-2020-25507
    31Monitor

    An incorrect permission assignment during the installation script of TeamworkCloud 18.0 thru 19.0 allows a local unprivileged attacker to ex

    HighCVSS 7.8No exploitEPSS 1%

    3ds · teamwork cloudDec 28, 2020

  • CVE-2023-2762
    31Monitor

    Use-After-Free vulnerability in SLDPRT file reading procedure affecting SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023

    HighCVSS 7.8No exploitEPSS 0%

    3ds · 3dexperience solidworksJul 12, 2023

  • CVE-2024-3299
    31Monitor

    Out-Of-Bounds Write, Use of Uninitialized Resource and Use-After-Free vulnerabilities exist in the SLDDRW and SLDPRT file reading procedure in eDrawings from Re

    HighCVSS 7.8No exploitEPSS 0%

    dassault systèmes · edrawingsApr 4, 2024

  • CVE-2023-2763
    31Monitor

    Use-After-Free, Out-of-bounds Write and Heap-based Buffer Overflow vulnerabilities exist in the DWG and DXF file reading procedure in SOLIDWORKS Desktop from Re

    HighCVSS 7.8No exploitEPSS 0%

    3ds · 3dexperience solidworksJul 12, 2023

  • CVE-2024-1847
    31Monitor

    Multiple vulnerabilities exist in file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024

    HighCVSS 7.8No exploitEPSS 0%

    3ds · solidworksFeb 28, 2024

  • CVE-2024-3298
    31Monitor

    Out-Of-Bounds Write and Type Confusion vulnerabilities exist in the DWG and DXF file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release

    HighCVSS 7.8No exploitEPSS 0%

    dassault systèmes · edrawingsApr 4, 2024

  • CVE-2024-1848
    31Monitor

    Multiple vulnerabilities exist in file reading procedure in SOLIDWORKS Desktop on Release SOLIDWORKS 2024

    HighCVSS 7.8No exploitEPSS 0%

    dassault systèmes · solidworks desktopMar 22, 2024

  • CVE-2026-3476
    31Monitor

    Code Injection vulnerability affecting SOLIDWORKS Desktop from Release 2025 through Release 2026

    HighCVSS 7.8No exploitEPSS 0%

    3ds · solidworksMar 16, 2026

  • CVE-2026-1335
    31Monitor

    Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWO

    HighCVSS 7.8No exploitEPSS 0%

    3ds · solidworks edrawingsFeb 16, 2026

  • CVE-2026-1333
    31Monitor

    Use of Uninitialized Variable vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Relea

    HighCVSS 7.8No exploitEPSS 0%

    3ds · solidworks edrawingsFeb 16, 2026

  • CVE-2026-1334
    31Monitor

    Out-Of-Bounds Read vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWOR

    HighCVSS 7.8No exploitEPSS 0%

    3ds · solidworks edrawingsFeb 16, 2026

  • CVE-2013-4721
    30Monitor

    SQL injection vulnerability in the RSS feed from records extension 1.0.0 and earlier for TYPO3 allows remote attackers to execute arbitrary

    HighCVSS 7.5No exploitEPSS 1%

    typo3 · typo3Jun 27, 2013