CVE-2025-6204

Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025

An Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to execute arbitrary code.

Affected

Dassault Systèmes · DELMIA Apriso

CVSS v3.1 3DS

8.0 HIGHCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

EPSS

79.20% chance of exploitation in the next 30 days, 100th percentile

CISA KEV

added 2025-10-28

Nuclei

critical · CWE-94

Published

2025-08-04

Updated

2026-02-26

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-6204.yaml

Security advisories

• https://www.3ds.com/trust-center/security/security-advisories/cve-2025-6204

References

• CVE Record
• NVD entry