Exploited Vulnerabilities DailyCVE-2025-5086: Dassault Systèmes DELMIA Apriso
EPSS96.9%No. 316 of 1739 in KEV
CVE year2025listed the same year
Same vendor in KEV3
Same product3
| Field | Value |
|---|---|
| Vendor | Dassault Systèmes |
| Product | DELMIA Apriso |
| Name | Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability |
| Added to KEV | 2025-09-11 |
| US federal due date | 2025-10-02 |
| Ransomware use | Unknown |
| CWE | CWE-502 |
CISA description
Dassault Systèmes DELMIA Apriso contains a deserialization of untrusted data vulnerability that could lead to a remote code execution.
Other entries for this product
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2025-6205 | Dassault Systèmes DELMIA Apriso | 2025-10-28 | 73.7% | Unknown |
| CVE-2025-6204 | Dassault Systèmes DELMIA Apriso | 2025-10-28 | 79.3% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A Dassault Systèmes DELMIA Apriso vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2025-09-11.