CVE-2025-6205

Monday, August 04, 2025

9.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Summary

A missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to gain privileged access to the application.

Affected Software

Vendor	Product	Version Range	Status
Dassault Systèmes	DELMIA Apriso	`Release 2020 Golden <= Release 2020 SP4`	affected
Dassault Systèmes	DELMIA Apriso	`Release 2021 Golden <= Release 2021 SP3`	affected
Dassault Systèmes	DELMIA Apriso	`Release 2022 Golden <= Release 2022 SP3`	affected
Dassault Systèmes	DELMIA Apriso	`Release 2023 Golden <= Release 2023 SP3`	affected
Dassault Systèmes	DELMIA Apriso	`Release 2024 Golden <= Release 2024 SP1`	affected
Dassault Systèmes	DELMIA Apriso	`Release 2025 Golden <= Release 2025 SP1`	affected

Weaknesses

CWE-862: CWE-862 Missing Authorization

ADP Enrichment

CISA ADP Vulnrichment

SSVC:
Exploitation: active
- Automatable: yes
- Technical Impact: total

Additional References

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-6205

References

https://www.3ds.com/trust-center/security/security-advisories/cve-2025-6205

Feedback

Was this page helpful?

Glad to hear it! Please tell us how we can improve.

Sorry to hear that. Please tell us how we can improve.