CVE-2025-6204: Dassault Systèmes DELMIA Apriso Code Injection Vulnerability
An Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to execute arbitrary code.
Other sources
Dassault Systèmes DELMIA Apriso contains a code injection vulnerability that could allow an attacker to execute arbitrary code.
— CISA
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-6204?
CVE-2025-6204 is classified as a high severity vulnerability due to the potential for arbitrary code execution.
How do I fix CVE-2025-6204?
To fix CVE-2025-6204, update DELMIA Apriso to the latest patch version released by DELMIA that addresses this vulnerability.
What versions of DELMIA Apriso are affected by CVE-2025-6204?
CVE-2025-6204 affects DELMIA Apriso from Release 2020 through Release 2025.
What type of vulnerability is CVE-2025-6204?
CVE-2025-6204 is an Improper Control of Generation of Code vulnerability, also known as a code injection vulnerability.
Can CVE-2025-6204 be exploited remotely?
Yes, CVE-2025-6204 can potentially be exploited remotely by attackers to execute arbitrary code.