https://pwn.watch/t/dassault-systemes Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Tue, 28 Oct 2025 00:00:00 GMT https://pwn.watch/i/dassault-systemes-delmia-apriso-cve-2025-6204 https://pwn.watch/i/dassault-systemes-delmia-apriso-cve-2025-6204 Tue, 28 Oct 2025 00:00:00 GMT critical <p>CVE-2025-6204: Dassault Systèmes DELMIA Apriso contains a code injection vulnerability that could allow an attacker to execute arbitrary code. CVE-2025-6205: Dassault Systèmes DELMIA Apriso contains a missing authorization vulnerability that could allow an attacker to gain privileged access to the application. Added to CISA KEV on 2025-10-28.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> patched · <strong>Fixed in:</strong> See vendor advisory linked in sources</p> <p><strong>Latest updates:</strong></p><ul><li>2025-10-28: CISA added CVE-2025-6204 to the KEV catalog (due 2025-11-18).</li><li>2025-10-28: CISA added CVE-2025-6205 to the KEV catalog (due 2025-11-18).</li></ul> <p><strong>CVEs:</strong> CVE-2025-6204, CVE-2025-6205</p> https://pwn.watch/i/dassault-systemes-delmia-apriso-cve-2025-5086 https://pwn.watch/i/dassault-systemes-delmia-apriso-cve-2025-5086 Thu, 11 Sep 2025 00:00:00 GMT critical <p>Dassault Systèmes DELMIA Apriso contains a deserialization of untrusted data vulnerability that could lead to a remote code execution. Added to CISA KEV on 2025-09-11.</p> <p><strong>Status:</strong> closed · <strong>Patch:</strong> patched · <strong>Fixed in:</strong> See vendor advisory linked in sources</p> <p><strong>Latest updates:</strong></p><ul><li>2025-09-11: CISA added CVE-2025-5086 to the KEV catalog (due 2025-10-02).</li></ul> <p><strong>CVEs:</strong> CVE-2025-5086</p>