← CVE Radar
CVE-2025-6204Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025
An Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to execute arbitrary code.
8.0 HIGHEPSS 76.60%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 8.0 | HIGH | 3.13DS (CNA) | CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H |
CISA required action
⚡ Known exploited · remediation due Nov 18, 2025
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Details
- CVE ID
- CVE-2025-6204
- Status
- Analyzed
- Assigner (CNA)
- 3DS
- Published
- Aug 4, 2025
- Last modified
- 2026-06-17 10:01 UTC
- Weaknesses
- CWE-94 · Improper Control of Generation of Code ('Code Injection')
Affected Products
As published by the CNA in the CVE record.
Dassault SystèmesDELMIA Apriso6 version ranges
- Release 2020 Golden through Release 2020 SP4
- Release 2021 Golden through Release 2021 SP3
- Release 2022 Golden through Release 2022 SP3
- Release 2023 Golden through Release 2023 SP3
- Release 2024 Golden through Release 2024 SP1
- Release 2025 Golden through Release 2025 SP1