CVE-2025-6205: Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability
Published Aug 4, 2025
·Updated
A missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to gain privileged access to the application.
Other sources
Dassault Systèmes DELMIA Apriso contains a missing authorization vulnerability that could allow an attacker to gain privileged access to the application.
— CISA
Affected Software
3 affected components
DELMIA Apriso>=2020<=2025
Dassault Systèmes DELMIA Apriso
3DS Delmia Apriso>=2020<2025
Event History
Aug 4, 2025
CVE Published
via MITRE·09:14 AM
Data Sourced
via MITRE·09:14 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:15 AM
DescriptionSeverityWeaknessAffected Software
Oct 28, 2025
Known Exploited
via CISA·12:00 AM
Data Sourced
via CISA·12:00 AM
RemedyDescriptionAffected Software
News Published
via BleepingComputer·06:59 PM
News Published
via BleepingComputer·07:01 PM
Frequently Asked Questions
1
What is the severity of CVE-2025-6205?
CVE-2025-6205 is classified as a critical severity vulnerability due to its ability to grant unauthorized privileged access.
2
How do I fix CVE-2025-6205?
To fix CVE-2025-6205, update DELMIA Apriso to the latest version released after June 2025.
3
What does CVE-2025-6205 affect?
CVE-2025-6205 affects DELMIA Apriso versions from 2020 to 2025.
4
What type of vulnerability is CVE-2025-6205?
CVE-2025-6205 is a missing authorization vulnerability.
5
Who is the vendor for CVE-2025-6205?
The vendor for CVE-2025-6205 is DELMIA, which develops the Apriso software.