Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2025-6204
PUBLISHED
More InfoOfficial Page
Assigner-3DS
Assigner Org ID-f5a594e6-46a7-4e60-8a08-0a786e70e433
View Known Exploited Vulnerability (KEV) details
Published At-04 Aug, 2025 | 09:14
Updated At-26 Feb, 2026 | 17:50
Rejected At-
▼CVE Numbering Authority (CNA)
Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025

An Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to execute arbitrary code.

Affected Products
Vendor
Dassault Systèmes S.E. (3DS)Dassault Systèmes
Product
DELMIA Apriso
Default Status
unaffected
Versions
Affected
  • From Release 2020 Golden through Release 2020 SP4 (custom)
  • From Release 2021 Golden through Release 2021 SP3 (custom)
  • From Release 2022 Golden through Release 2022 SP3 (custom)
  • From Release 2023 Golden through Release 2023 SP3 (custom)
  • From Release 2024 Golden through Release 2024 SP1 (custom)
  • From Release 2025 Golden through Release 2025 SP1 (custom)
Problem Types
TypeCWE IDDescription
CWECWE-94CWE-94 Improper Control of Generation of Code ('Code Injection')
Type: CWE
CWE ID: CWE-94
Description: CWE-94 Improper Control of Generation of Code ('Code Injection')
Metrics
VersionBase scoreBase severityVector
3.18.0HIGH
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Version: 3.1
Base score: 8.0
Base severity: HIGH
Vector:
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://www.3ds.com/trust-center/security/security-advisories/cve-2025-6204
N/A
Hyperlink: https://www.3ds.com/trust-center/security/security-advisories/cve-2025-6204
Resource: N/A
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
kev
dateAdded:
2025-10-28
reference:
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-6204
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-6204
government-resource
Hyperlink: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-6204
Resource:
government-resource
Details not found