What is the CVSS score of CVE-2025-6204?

CVE-2025-6204 has a CVSS 3.1 base score of 8.0 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 7.5%.

Which versions of Delmia Apriso are affected by CVE-2025-6204?

Organizations using DELMIA Apriso from Release 2020 face notable risk from CVE-2025-6204, a code injection vulnerability rated CVSS 8.0.

Is CVE-2025-6204 being actively exploited?

Yes, CVE-2025-6204 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, confirming active in-the-wild exploitation. Immediate patching is required.

How to fix or mitigate CVE-2025-6204?

Within 24 hours: Identify all affected systems running DELMIA Apriso from Release 2020 and apply vendor patches immediately. Validate that input sanitization is in place for all user-controlled parameters.

Delmia Apriso CVE-2025-6204

HIGH

Code Injection (CWE-94)

2025-08-04 3DS.Information-Security@3ds.com

RCE Code Injection Delmia Apriso

8.0

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

High

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 19:05 vuln.today

Added to CISA KEV

Oct 29, 2025 - 12:49 cisa

CISA KEV

CVE Published

Aug 04, 2025 - 10:15 nvd

HIGH 8.0

DescriptionNVD

An Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to execute arbitrary code.

AnalysisAI

DELMIA Apriso from Release 2020 through 2025 contains a code injection vulnerability allowing attackers to execute arbitrary code on the manufacturing execution system.

Technical ContextAI

The CWE-94 code injection in Apriso allows crafted input to inject executable code that runs within the MES application context.

RemediationAI

Apply Dassault Systèmes security patches. Restrict network access to Apriso instances.

CVE-2025-6204 vulnerability details – vuln.today

Back

Delmia Apriso CVE-2025-6204

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

RemediationAI

Share

External POC / Exploit Code