DELMIA Apriso vulnerabilities

7 known vulnerabilities in DELMIA Apriso from Dassault Systèmes. 7 are rated high or critical, and 3 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  DELMIA Apriso: Improper Authentication

  CVE-2026-9695Jul 8, 2026Dassault Systèmes

  An Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026 could allow an attacker to gain privileged access to the server.

• 9.1 Critical severity

  Dassault Systèmes DELMIA Apriso Missing Authorization Exploited

  CVE-2025-6205Aug 4, 2025Dassault SystèmesEPSS 67.2%

  A missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to gain privileged access to the application.

• 8.0 High severity

  Dassault Systèmes DELMIA Apriso Code Injection Exploited

  CVE-2025-6204Aug 4, 2025Dassault SystèmesEPSS 76.8%

  An Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to execute arbitrary code.

• 9.0 Critical severity

  Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Exploited

  CVE-2025-5086Jun 2, 2025Dassault SystèmesEPSS 97.2%

  A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could lead to a remote code execution.

• 8.5 High severity

  DELMIA Apriso: Deserialization of Untrusted Data

  CVE-2024-3301May 30, 2024Dassault Systèmes

  An unsafe .NET object deserialization vulnerability in DELMIA Apriso Release 2019 through Release 2024 could lead to post-authentication remote code execution.

• 9.0 Critical severity

  DELMIA Apriso: Deserialization of Untrusted Data

  CVE-2024-3300May 30, 2024Dassault SystèmesEPSS 2.87%

  An unsafe .NET object deserialization vulnerability in DELMIA Apriso Release 2019 through Release 2024 could lead to pre-authentication remote code execution.

• 7.5 High severity

  DELMIA Apriso: Server-Side Request Forgery

  CVE-2023-2140Apr 21, 2023Dassault Systèmes

  A Server-Side Request Forgery vulnerability in DELMIA Apriso Release 2017 through Release 2022 could allow an unauthenticated attacker to issue requests to arbitrary hosts on behalf of the server running the DELMIA Apriso application.