Dassault Systèmes DELMIA Apriso vulnerabilities

10 known vulnerabilities, 3 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Exploited Dassault Systèmes DELMIA Apriso vulnerabilities

CVE-2025-6205 — Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability
CVE-2025-6204 — Dassault Systèmes DELMIA Apriso Code Injection Vulnerability
CVE-2025-5086 — Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability

CVE-2026-9695 — Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026 (CVSS 9.8)
CVE-2025-6205 — Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability (CVSS 9.1) — exploited
CVE-2025-6204 — Dassault Systèmes DELMIA Apriso Code Injection Vulnerability (CVSS 8.0) — exploited
CVE-2025-5086 — Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability (CVSS 9.0) — exploited
CVE-2024-3301 — Post-authentication Unsafe .NET object deserialization vulnerability affecting DELMIA Apriso Release 2019 through Release 2024 (CVSS 8.5)
CVE-2024-3300 — Pre-authentication Unsafe .NET object deserialization vulnerability affecting DELMIA Apriso Release 2019 through Release 2024 (CVSS 9.0)
CVE-2024-0935 — Insertion of Sensitive Information into Log File vulnerabilities affecting DELMIA Apriso Release 2019 through Release 2024 (CVSS 7.5)
CVE-2023-2141 — Unsafe .NET object deserialization affecting DELMIA Apriso Release 2017 through Release 2022 (CVSS 8.8)
CVE-2023-2140 — Server-Side Request Forgery vulnerability affecting DELMIA Apriso Release 2017 through Release 2022 (CVSS 7.5)
CVE-2023-2139 — Reflected Cross-site Scripting vulnerability affecting DELMIA Apriso Release 2017 through Release 2022 (CVSS 6.1)