CVE-2025-6204 Dassault Systèmes DELMIA Apriso Code Injection
An attacker can execute arbitrary code in DELMIA Apriso due to improper control of code generation, requiring immediate patching.
- Exploited in the wild
- Since 28 Oct 2025
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-6204?
CVE-2025-6204 is a high-severity code injection vulnerability in Dassault Systèmes DELMIA Apriso, published on 4 Aug 2025. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
An Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to execute arbitrary code.
Weakness: CWE-94
Which versions are affected by CVE-2025-6204?
It affects 1 product.
Products include 3ds Delmia Apriso.
How do I fix CVE-2025-6204?
No fix has been published for CVE-2025-6204 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 18 Nov 2025.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2025-6204 being exploited?
Yes. Attackers have exploited CVE-2025-6204 in the wild since at least 28 Oct 2025.
Public exploit code: 1 Nuclei template.
Other vulnerabilities in Dassault Systèmes DELMIA Apriso
- CVE-2025-6205 Dassault Systèmes DELMIA Apriso Missing Authorization
- CVE-2025-5086 Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data
- CVE-2023-2141 Unsafe .NET object deserialization affecting DELMIA Apriso Release 2017 through Release 2022
- CVE-2023-2140 Server-Side Request Forgery vulnerability affecting DELMIA Apriso Release 2017 through Release 2022
- CVE-2023-2139 Reflected Cross-site Scripting vulnerability affecting DELMIA Apriso Release 2017 through Release 2022
Sources
Also known as GHSA-xxh4-727v-gjcv.