CVE-2025-6204

HighCVSS 8.0/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

An Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to execute arbitrary code.

Metrics

CVSS 3.1 8.0/10CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-94

Affected software

Vendor	Product	Versions
Dassault Systèmes	DELMIA Apriso	>= Release 2020 Golden, <= Release 2020 SP4; >= Release 2021 Golden, <= Release 2021 SP3; >= Release 2022 Golden, <= Release 2022 SP3; >= Release 2023 Golden, <= Release 2023 SP3; >= Release 2024 Golden, <= Release 2024 SP1; >= Release 2025 Golden, <= Release 2025 SP1

References

https://www.3ds.com/trust-center/security/security-advisories/cve-2025-6204Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-6204US Government Resource

Timeline

Published: Aug 4, 2025
Last modified: Jun 17, 2026
Added to CISA KEV: Oct 28, 2025
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-620407.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YOP YOP Poll yop-poll.This issue affec CVE-2025-620417.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem (Elementor) thegem-CVE-2025-620426.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bastien Ho Event post event-post.This CVE-2025-620436.5Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in WPSight WPCasa allows DOM-Based XSS.Th CVE-2025-620446.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem Theme Elements (for CVE-2025-620458.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CodexThemes TheGem CVE-2025-620466.5Missing Authorization vulnerability in CodexThemes TheGem Demo Import (for WPBakery) thegem-importer.This issue affects TheGem Demo Import (CVE-2025-620479.9Unrestricted Upload of File with Dangerous Type vulnerability in Case-Themes Case Addons case-addons.This issue affects Case Addons: from n/CVE-2025-620485.4Missing Authorization vulnerability in WPMU DEV - Your All-in-One WordPress Platform SmartCrawl smartcrawl-seo.This issue affects SmartCrawl CVE-2025-620496.5Missing Authorization vulnerability in Stylemix Cost Calculator Builder cost-calculator-builder.This issue affects Cost Calculator Builder: CVE-2025-62059.1A missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to gain privile CVE-2025-620509.9Unrestricted Upload of File with Dangerous Type vulnerability in blazethemes Blogmatic blogmatic.This issue affects Blogmatic: from n/a thro