CVE-2025-6205

Description

A missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to gain privileged access to the application.

Scoring

• CVSS: 9.1 (CRITICAL, 3.1)
• EPSS exploitation probability: Not yet available
• EPSS percentile: Not yet available

CISA KEV status

• Added to KEV: 2025-10-28
• Remediation due date: 2025-11-18
• Known ransomware campaign use: Unknown

Weakness types (CWE)

• CWE-862

References

• https://www.3ds.com/trust-center/security/security-advisories/cve-2025-6205
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-6205

More from Dassault Systèmes

• CVE-2025-6204 — DELMIA Apriso
• CVE-2025-5086 — DELMIA Apriso