9
CVE-2025-5086
- EPSS 67.37%
- Published 02.06.2025 17:42:42
- Last modified 12.09.2025 13:40:47
- Source 3DS.Information-Security@3ds.c
- Teams watchlist Login
- Open Login
A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could lead to a remote code execution.
Data is provided by the National Vulnerability Database (NVD)
3ds ≫ Delmia Apriso Version >= 2020 <= 2025
11.09.2025: CISA Known Exploited Vulnerabilities (KEV) Catalog
Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability
VulnerabilityDassault Systèmes DELMIA Apriso contains a deserialization of untrusted data vulnerability that could lead to a remote code execution.
DescriptionApply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Required actions| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 67.37% | 0.985 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| 3DS.Information-Security@3ds.com | 9 | 2.2 | 6 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
|
CWE-502 Deserialization of Untrusted Data
The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.