Actively exploited in the wild
Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability
Dassault Systèmes - DELMIA Apriso · Listed in the CISA KEV since 2025-10-28. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CVE-2025-6205
CriticalCVSS 9.1KEVSummary
A missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to gain privileged access to the application.
Risk Assessment
An attacker could obtain administrative or other privileged roles, potentially leading to unauthorized changes in the production system.
Recommendation
Update DELMIA Apriso to the latest patched version and verify access control mechanisms in the application.
Other vulnerabilities in DELMIA Apriso
See all- CVE-2026-9695Critical
An Improper Authentication vulnerability in DELMIA Apriso from Release 2020 through Release 2026 could allow an attacker to gain privileged access to the server.
- CVE-2025-5086CriticalActively exploited
A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could lead to a remote code execution.
Original NVD description (English source)
A missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to gain privileged access to the application.