CVE-2025-6204
8
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Summary
An Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to execute arbitrary code.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Dassault Systèmes | DELMIA Apriso | Release 2020 Golden <= Release 2020 SP4 | affected |
| Dassault Systèmes | DELMIA Apriso | Release 2021 Golden <= Release 2021 SP3 | affected |
| Dassault Systèmes | DELMIA Apriso | Release 2022 Golden <= Release 2022 SP3 | affected |
| Dassault Systèmes | DELMIA Apriso | Release 2023 Golden <= Release 2023 SP3 | affected |
| Dassault Systèmes | DELMIA Apriso | Release 2024 Golden <= Release 2024 SP1 | affected |
| Dassault Systèmes | DELMIA Apriso | Release 2025 Golden <= Release 2025 SP1 | affected |
Weaknesses
- CWE-94: CWE-94 Improper Control of Generation of Code ('Code Injection')
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: active
- Automatable: no
- Technical Impact: total
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.