CVE-2023-1997 (published 2023-08-28T15:37:21.969Z)
An OS Command Injection vulnerability exists in SIMULIA 3DOrchestrate from Release 3DEXPERIENCE R2021x through Release 3DEXPERIENCE R2023x. A specially crafted HTTP request can lead to arbitrary command execution.
Affected products: Vendor: Dassault Systèmes
Product: SIMULIA 3DOrchestrate
Versions: Release 3DEXPERIENCE R2021x Golden, Release 3DEXPERIENCE R2022x Golden, Release 3DEXPERIENCE R2023x Golden