CVE-2025-6205

Published Aug 4, 2025

Last updated a month ago

DELMIA Apriso

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-6205 is a missing authorization vulnerability affecting Dassault Systèmes DELMIA Apriso from Release 2020 through Release 2025. An attacker could exploit this flaw to gain privileged access to the application. This vulnerability has been added to CISA's Known Exploited Vulnerabilities Catalog, and federal agencies are required to fix it by November 18, 2025. It was addressed by Dassault Systèmes in early August. ProjectDiscovery researchers indicated that this flaw can be combined with CVE-2025-6204 to create accounts with elevated privileges and drop executable files, leading to a full application compromise.

Description: A missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to gain privileged access to the application.
Source: 3DS.Information-Security@3ds.com
NVD status: Analyzed
Products: delmia_apriso

Risk scores

CVSS 3.1

Type: Secondary
Base score: 9.1
Impact score: 5.2
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Severity: CRITICAL

Known exploits

Data from CISA

Vulnerability name: Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability
Exploit added on: Oct 28, 2025
Exploit action due: Nov 18, 2025
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Weaknesses

3DS.Information-Security@3ds.com: CWE-862

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:3ds:delmia_apriso:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "83419377-1A54-43D7-B7EC-064555B91D12",
            "versionEndExcluding": "2025",
            "versionStartIncluding": "2020"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.