CVE Watch—

CVE-2025-6204

Dassault Systèmes DELMIA Apriso Code Injection Vulnerability

CVSS

—

Sem CVSS

EPSS

76.6%

p100

KEV

SIM

28 de out. de 2025

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

76.6%EPSS · 30 dias79.6%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Dassault Systèmes / DELMIA Apriso

Vulnerabilidade

Dassault Systèmes DELMIA Apriso Code Injection Vulnerability

Adicionado ao KEV

28 de out. de 2025

Corrigir até

18 de nov. de 2025

Uso conhecido em ransomware

Não

Descrição resumida

Dassault Systèmes DELMIA Apriso contains a code injection vulnerability that could allow an attacker to execute arbitrary code.

Ação necessária

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://www.3ds.com/trust-center/security/security-advisories/cve-2025-6204 ; https://nvd.nist.gov/vuln/detail/CVE-2025-6204

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2025-5086—

99.9%

KEV—80Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability—CVE-2025-6205—

99.3%

KEV—80Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability—