3DS
3DS Delmia Apriso: vulnerabilidades y CVE
3DS Delmia Apriso tiene 10 vulnerabilidades publicadas, 1 de ellas en los últimos 12 meses. 4 son críticas y 3 figuran en el catálogo de explotación activa de CISA.
CVE10
Últimos 12 meses1
Críticas4
Explotadas activamente3
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
🔴 Explotadas activamente (CISA KEV)
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2025-6204 | Alta (8) | 78% | ⚠ Explotación activa | 4 ago 2025 | An Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to execute arbitrary code. |
| CVE-2025-6205 | Crítica (9.1) | 73% | ⚠ Explotación activa | 4 ago 2025 | A missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to gain privileged access to the application. |
| CVE-2025-5086 | Crítica (9) | 97% | ⚠ Explotación activa | 2 jun 2025 | A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could lead to a remote code execution. |
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-9695 | Crítica (9.8) | 0.61% | — | 8 jul 2026 | An Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026 could allow an attacker to gain privileged access to the server. |
| CVE-2025-6205 | Crítica (9.1) | 73% | ⚠ Explotación activa | 4 ago 2025 | A missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to gain privileged access to the application. |
| CVE-2025-6204 | Alta (8) | 78% | ⚠ Explotación activa | 4 ago 2025 | An Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to execute arbitrary code. |
| CVE-2025-5086 | Crítica (9) | 97% | ⚠ Explotación activa | 2 jun 2025 | A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could lead to a remote code execution. |
| CVE-2024-3301 | Alta (8.5) | 0.67% | — | 30 may 2024 | An unsafe .NET object deserialization vulnerability in DELMIA Apriso Release 2019 through Release 2024 could lead to post-authentication remote code execution. |
| CVE-2024-3300 | Crítica (9) | 2.8% | — | 30 may 2024 | An unsafe .NET object deserialization vulnerability in DELMIA Apriso Release 2019 through Release 2024 could lead to pre-authentication remote code execution. |
| CVE-2024-0935 | Alta (7.5) | 0.35% | — | 1 feb 2024 | Insertion of Sensitive Information into Log File vulnerabilities are affecting DELMIA Apriso Release 2019 through Release 2024 |
| CVE-2023-2141 | Alta (8.8) | 1.0% | — | 21 abr 2023 | An unsafe .NET object deserialization in DELMIA Apriso Release 2017 through Release 2022 could lead to post-authentication remote code execution. |
| CVE-2023-2140 | Alta (7.5) | 0.56% | — | 21 abr 2023 | A Server-Side Request Forgery vulnerability in DELMIA Apriso Release 2017 through Release 2022 could allow an unauthenticated attacker to issue requests to arbitrary hosts on behalf of the server running the DELMIA… |
| CVE-2023-2139 | Media (6.1) | 0.35% | — | 21 abr 2023 | A reflected Cross-site Scripting (XSS) Vulnerability in DELMIA Apriso Release 2017 through Release 2022 allows an attacker to execute arbitrary script code. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.