3ds Delmia Apriso — known CVE vulnerabilities

Every CVE whose affected-product data names 3ds Delmia Apriso, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2025-6205 — CVSS 9.1 (critical) — actively exploited: A missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to gain…
• CVE-2025-5086 — CVSS 9.0 (critical) — actively exploited: A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could lead to a remote…
• CVE-2023-2141 — CVSS 8.5 (high): An unsafe .NET object deserialization in DELMIA Apriso Release 2017 through Release 2022 could lead to post-authentication remote code…
• CVE-2025-6204 — CVSS 8.0 (high) — actively exploited: An Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025…
• CVE-2023-2140 — CVSS 7.5 (high): A Server-Side Request Forgery vulnerability in DELMIA Apriso Release 2017 through Release 2022 could allow an unauthenticated attacker to…
• CVE-2023-2139 — CVSS 5.4 (medium): A reflected Cross-site Scripting (XSS) Vulnerability in DELMIA Apriso Release 2017 through Release 2022 allows an attacker to execute…
• CVE-2024-0935 — CVSS 4.4 (medium): Insertion of Sensitive Information into Log File vulnerabilities are affecting DELMIA Apriso Release 2019 through Release 2024