VULNERABILITY INTELLIGENCE
CVE-2025-6204
CVSS score8 HIGH
EPSS probability79.55%
CISA KEVKnown exploited vulnerability
Published2025-08-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Known Exploited Vulnerability
Dassault Systèmes DELMIA Apriso Code Injection Vulnerability
Vendor / product: Dassault Systèmes / DELMIA Apriso
Description
An Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to execute arbitrary code.
Weakness classification
- 3DS.Information-Security@3ds.com: CWE-94
Primary references
- 3DS.Information-Security@3ds.com — Vendor Advisory
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource