What is the CVSS score of CVE-2025-6204?

CVE-2025-6204 has a CVSS 3.1 base score of 8.0 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 7.5%.

Which versions of Delmia Apriso are affected by CVE-2025-6204?

Organizations using DELMIA Apriso from Release 2020 face notable risk from CVE-2025-6204, a code injection vulnerability rated CVSS 8.0.

Is there a public PoC exploit available for CVE-2025-6204?

Yes, a public proof-of-concept exploit is available for CVE-2025-6204. Prioritise patching immediately. EPSS: 7.5%.

How to fix or mitigate CVE-2025-6204?

Within 24 hours: Identify all affected systems running DELMIA Apriso from Release 2020 and apply vendor patches immediately. Validate that input sanitization is in place for all user-controlled parameters.

Delmia Apriso CVE-2025-6204

HIGH

Code Injection (CWE-94)

2025-08-04 3DS.Information-Security@3ds.com

RCE Code Injection Delmia Apriso

8.0

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.0 HIGH

AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

High

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 19:05 vuln.today

Added to CISA KEV

Oct 29, 2025 - 12:49 cisa

CISA KEV

CVE Published

Aug 04, 2025 - 10:15 nvd

HIGH 8.0

DescriptionCVE.org

An Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to execute arbitrary code.

AnalysisAI

DELMIA Apriso from Release 2020 through 2025 contains a code injection vulnerability allowing attackers to execute arbitrary code on the manufacturing execution system.