CVE-2025-6205

Missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025

A missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to gain privileged access to the application.

Affected

Dassault Systèmes · DELMIA Apriso

CVSS v3.1 3DS

9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS

73.57% chance of exploitation in the next 30 days, 99th percentile

CISA KEV

added 2025-10-28

Nuclei

high · CWE-862

Published

2025-08-04

Updated

2026-02-26

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-6205.yaml

Security advisories

• https://www.3ds.com/trust-center/security/security-advisories/cve-2025-6205

References

• CVE Record
• NVD entry