CVE-2025-6204

Timeline

Detection, updates, and resolution for this record.

1. Aug 4, 2025 · Catalog

   Detected

   An Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to execute arbitrary code.

2. Oct 28, 2025 · CISA KEV

   Known exploited

   Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

3. Nov 18, 2025 · CISA KEV

   Remediation due

   Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

4. Jun 17, 2026 · Catalog

   Updated

   An Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to execute arbitrary code.

Affected

• cpe 3ds/delmia aprisoversion unspecified
• vendor Dassault Systèmes DELMIA Aprisoversion unspecified

Sources

• CISA KEVCVE-2025-6204

  Dassault Systèmes DELMIA Apriso contains a code injection vulnerability that could allow an attacker to execute arbitrary code.

  cisa.gov
• CVE.orgCVE-2025-6204

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2025-6204

  30-day exploitation probability 79.3%

  first.org
• NIST NVDCVE-2025-6204

  An Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to execute arbitrary code.

  nvd.nist.gov

References

• CISA note · nvd.nist.gov
• CISA note · 3ds.com
• US Government Resource · cisa.gov