High severity · published Aug 4, 2025
CVE-2025-6204
Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025
In wildKEV
8.0
CVSS
79.6%
EPSS
Yes
On KEV
Description
An Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to execute arbitrary code.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)79.6% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed Oct 28, 2025
Federal remediation dueNov 18, 2025
Ransomware campaign useNot known
Affected products
Which versions
DA
DELMIA Apriso · Dassault Systèmes
Release 2020 Golden through Release 2020 SP4; Release 2021 Golden through Release 2021 SP3; Release 2022 Golden through Release 2022 SP3; Release 2023 Golden through Release 2023 SP3; Release 2024 Golden through Release 2024 SP1; Release 2025 Golden through Release 2025 SP1 · source: vendor, NVD, KEV
In the news
VulnerabilityHigh
[CISA KEV] CVE-2025-6204: Dassault Systèmes DELMIA Apriso - Dassault Systèmes DELMIA Apriso Code Injection Vulnerability
Dassault Systèmes DELMIA Apriso contains a code injection vulnerability that could allow an attacker to execute arbitrary code.
DADELMIA AprisoCVE-2025-6204
Oct 28, 2025·CISA KEV
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-6204
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-6204
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
www.3ds.com
https://www.3ds.com/trust-center/security/security-advisories/cve-2025-6204
More from DELMIA Apriso
9.1
CVE-2025-6205
Missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025
9.0
CVE-2025-5086
Deserialization of Untrusted Data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025
9.8
CVE-2026-9695
Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026