# CVE-2025-6204: Dassault Systèmes DELMIA Apriso code injection

Source: https://junglewise.ai/threats/cve-2025-6204-dassault-systemes-delmia-apriso-code-injection  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-10-28. Updated: 2026-05-15  
License: CC BY 4.0 with a link back

CVE-2025-6204 · Severity: critical · CVSS 8 · Exploited in the wild · Published 2025-10-28

Dassault Systèmes DELMIA Apriso, a manufacturing operations management platform used to manage global production and supply chains, contains a critical security flaw. An attacker could exploit this vulnerability to inject and execute malicious code on the system. This could lead to a complete takeover of the manufacturing software, potentially disrupting production lines or exposing sensitive operational data.

Technologies: [Dassault SystèMes DELMIA Apriso](https://junglewise.ai/threats/technologies/delmia-apriso). Vendors: [Dassault SystèMes](https://junglewise.ai/threats/vendors/dassault-syst-mes).

## Quick answers

**Is CVE-2025-6204 exploited in the wild?** Yes. CVE-2025-6204 is known to be exploited in the wild, first recorded on 28 October 2025. Treat it as urgent.

**How severe is CVE-2025-6204?** Critical severity, with a CVSS score of 8, published 28 October 2025.

**Which products and versions are affected?** Dassault Systèmes DELMIA Apriso Release 2020 through Release 2025.

**Is there a fix for CVE-2025-6204?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2025-6204 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2025-6204?** Check whether you run Dassault SystèMes DELMIA Apriso. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A code injection vulnerability (CWE-94) exists in Dassault Systèmes DELMIA Apriso from Release 2020 through Release 2025. The flaw stems from improper control of code generation, allowing an attacker to execute arbitrary commands on the host system. While the attack vector is network-based, exploitation requires high privileges (PR:H) and involves high complexity (AC:H). Successful exploitation results in a scope change (S:C), granting the attacker significant impact over the confidentiality, integrity, and availability of the environment. This vulnerability has been added to the CISA Known Exploited Vulnerabilities (KEV) catalog, indicating active exploitation in the wild.

## Affected products

- Dassault Systèmes DELMIA Apriso Release 2020 through Release 2025

## Timeline

- 2025-08-04: disclosed: Initial CVE publication
- 2025-10-28: kev added: Added to CISA Known Exploited Vulnerabilities catalog
- 2025-10-28: advisory: Vendor advisory updated

## Related threats

- [Dassault Systèmes DELMIA Apriso missing authorization](https://junglewise.ai/threats/cve-2025-6205-dassault-systemes-delmia-apriso-missing-authorization)
- [Dassault Systèmes DELMIA Apriso deserialization remote code execution](https://junglewise.ai/threats/cve-2025-5086-dassault-systemes-delmia-apriso-deserialization-remote-code)