🟡 CVE-2025-6204

📋 Vulnerability Details

Data Source: CIRCL

Confidence: MEDIUM

Exploitation Method: DIRECT_NETWORK

CVE Published: 2025-08-04

Added to CISA KEV: 2025-10-28 85 DAYS BETWEEN CVE AND KEV

🎯 Recommendations:

• CRITICAL: Check for indicators of compromise - CISA analysis indicates active exploitation. Review Apriso system logs for unusual administrative activity, unauthorized code execution, or suspicious file modifications
• Apply security patches immediately for affected DELMIA Apriso versions (2020-2025)
• Restrict network access to Apriso systems and implement network segmentation
• Monitor for unusual administrative activities and code execution patterns
• Audit user privileges and remove unnecessary high-privilege accounts
• HIGH priority patching due to active exploitation evidence

🔍 Web Intelligence (Kagi · 2025-10-30)

Sources

1. Two additional flaws in Dassault Systèmes DELMIA Apriso exploited

   For example, after using CVE-2025-6205 to create new credentials, the attacker would be able to leverage CVE-2025-6204 to upload a malicious file ...

2. CISA Adds Two Known Exploited Vulnerabilities to Catalog

   CISA has added two new vulnerabilities to its KEV Catalog, based on evidence of active exploitation. ... CVE-2025-6204 Dassault Systèmes DELMIA ...

3. CVE-2025-6204 - Exploits & Severity - Feedly

   CVE-2025-6204 - DELmia Apriso Code Injection Vulnerability. Latest Vulnerabilities / 1h.4, 2025, 10:15 a.m. 31 minutes ago Description : An Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to…

4. Known Exploited Vulnerabilities Catalog

   CVE-2025-6204. Dassault Systèmes DELMIA Apriso Code Injection Vulnerability: Dassault Systèmes DELMIA Apriso contains a code injection vulnerability that could ...

5. The Hacker News | #1 Trusted Source for Cybersecurity News

   CVE-2025-6205 (CVSS score: 9.1) - A missing authorization vulnerability in Dassault Systèmes DELMIA Apriso that could allow an attacker to gain privileged access to the application. CVE-2025-24893 (CVSS score: 9.8) - An improper neutralization of input in a dynamic evaluation call (aka eval injectio…

6. Active Exploits Hit Dassault and XWiki — CISA Confirms Critical Flaws ...

   CVE-2025-6204 (CVSS score: 8.0) - A code injection vulnerability in Dassault Systèmes DELMIA Apriso that could allow an attacker to execute arbitrary code. CVE-2025-6205 (CVSS score: 9.1) - A missing authorization vulnerability in Dassault Systèmes DELMIA Apriso that could allow an attacker to gain…

7. CVE-2025-6204

   Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025.