Advisories · Technology

Dassault Systèmes DELMIA Apriso.

Every CVE that names Dassault Systèmes DELMIA Apriso among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-9695 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026
- Dassault Systèmes DELMIA Apriso
- Authentication bypass
Not analysed yet 8 Jul 2026
CVE-2025-6205 CVE record

CVSS 9.1 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025
- Dassault Systèmes DELMIA Apriso
- Broken access control
Not analysed yet 4 Aug 2025
CVE-2025-6204 CVE record

CVSS 8.0 HighCritical · KEV, CVSS 7+ and EPSSKEV

Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025
- Dassault Systèmes DELMIA Apriso
- Code injection
Not analysed yet 4 Aug 2025
CVE-2025-5086 CVE record

CVSS 9.0 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV

Deserialization of Untrusted Data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025
- Dassault Systèmes DELMIA Apriso
- Insecure deserialization
Not analysed yet 2 Jun 2025
CVE-2024-3300 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Pre-authentication Unsafe .NET object deserialization vulnerability affecting DELMIA Apriso Release 2019 through Release 2024
- Dassault Systèmes DELMIA Apriso
- Insecure deserialization
Not analysed yet 30 May 2024
CVE-2024-3301 CVE record

CVSS 8.5 High

Post-authentication Unsafe .NET object deserialization vulnerability affecting DELMIA Apriso Release 2019 through Release 2024
- Dassault Systèmes DELMIA Apriso
- Insecure deserialization
Not analysed yet 30 May 2024
CVE-2024-0935 CVE record

CVSS 4.4 Medium

Insertion of Sensitive Information into Log File vulnerabilities affecting DELMIA Apriso Release 2019 through Release 2024
- Dassault Systèmes DELMIA Apriso
- Information disclosure
Not analysed yet 1 Feb 2024
CVE-2023-2141 CVE record

CVSS 8.5 High

Unsafe .NET object deserialization affecting DELMIA Apriso Release 2017 through Release 2022
- Dassault Systèmes DELMIA Apriso
- Insecure deserialization
Not analysed yet 21 Apr 2023
CVE-2023-2140 CVE record

CVSS 7.5 High

Server-Side Request Forgery vulnerability affecting DELMIA Apriso Release 2017 through Release 2022
- Dassault Systèmes DELMIA Apriso
- Server-side request forgery (SSRF)
Not analysed yet 21 Apr 2023
CVE-2023-2139 CVE record

CVSS 5.4 Medium

Reflected Cross-site Scripting vulnerability affecting DELMIA Apriso Release 2017 through Release 2022
- Dassault Systèmes DELMIA Apriso
- Cross-site scripting (XSS)
Not analysed yet 21 Apr 2023