Dassault Systèmes

Records120All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical17CVSS 9.0–10.0

CVSS high94CVSS 7.0–8.9

Exploited now

Dassault Systèmes records in CISA KEV

TI-2025-05612 Dassault Systèmes DELMIA Apriso Code Injection Vulnerability CRITICAL 94KEV 2025-10-28 TI-2025-05613 Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability CRITICAL 98KEV 2025-10-28 TI-2025-04561 Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability CRITICAL 98KEV 2025-09-11

Components

Products in the NVD configurations · select one to filter the records

3dexperience Enovia 22 records MEDIUM 3dexperience 11 records MEDIUM Delmia Apriso 7 records CRITICAL Solidworks Edrawings 3 records LOW 3dexperience Solidworks 2 records LOW 3dswymer 2 records LOW Catia 2 records MEDIUM Enovia Live Collaboration 2 records MEDIUM

Records

7 records in Delmia Apriso · all components

TI-2025-05613 CVE-2025-6205 · GHSA-7pcv-gm7q-mj69

Missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025

CRITICAL 98KEV

A missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to gain privileged access to the application.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.67159 Published 2025-08-04 No fix listed CWE-862

TI-2025-04561 CVE-2025-5086 · GHSA-7c63-xmgg-xrx5

Deserialization of Untrusted Data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025

CRITICAL 98KEV

A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could lead to a remote code execution.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.97095 Published 2025-06-02 No fix listed CWE-502

TI-2025-05612 CVE-2025-6204 · GHSA-xxh4-727v-gjcv

Code injection in Dassault Systèmes DELMIA Apriso

CRITICAL 94KEV

An Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to execute arbitrary code.

CVSS 3.1HIGH 8.0 Network High privileges No interaction EPSS 0.76605 Published 2025-08-04 No fix listed CWE-94

TI-2023-02009 CVE-2023-2141 · GHSA-4c8v-cr5p-rp5v

Unsafe .NET object deserialization affecting DELMIA Apriso Release 2017 through Release 2022

MEDIUM 42

An unsafe .NET object deserialization in DELMIA Apriso Release 2017 through Release 2022 could lead to post-authentication remote code execution.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01044 Published 2023-04-21 No fix listed CWE-502

TI-2023-02008 CVE-2023-2140 · GHSA-xc69-c397-p3r8

Server-Side Request Forgery vulnerability affecting DELMIA Apriso Release 2017 through Release 2022

MEDIUM 40

A Server-Side Request Forgery vulnerability in DELMIA Apriso Release 2017 through Release 2022 could allow an unauthenticated attacker to issue requests to arbitrary hosts on behalf of the server running the DELMIA Apris…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00563 Published 2023-04-21 No fix listed CWE-918

TI-2024-00862 CVE-2024-0935 · GHSA-548x-pj87-qv7f

Sensitive information in log files in Dassault Systèmes DELMIA Apriso

LOW 33

Insertion of Sensitive Information into Log File vulnerabilities are affecting DELMIA Apriso Release 2019 through Release 2024

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00351 Published 2024-02-01 No fix listed CWE-532

TI-2023-02007 CVE-2023-2139 · GHSA-mc28-gwr6-f4mf

Reflected Cross-site Scripting vulnerability affecting DELMIA Apriso Release 2017 through Release 2022

LOW 27

A reflected Cross-site Scripting (XSS) Vulnerability in DELMIA Apriso Release 2017 through Release 2022 allows an attacker to execute arbitrary script code.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00353 Published 2023-04-21 No fix listed CWE-79

Open these records in search →