Skip to content
CVE PROGRAM SOURCE RECORD9.0 Critical

CVE-2025-5086

Deserialization of Untrusted Data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025

Description

A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could lead to a remote code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Dassault Systèmes DELMIA Apriso

Default version status: unaffected

  • Release 2020 Golden to ≤ Release 2020 SP4affected
  • Release 2021 Golden to ≤ Release 2021 SP3affected
  • Release 2022 Golden to ≤ Release 2022 SP3affected
  • Release 2023 Golden to ≤ Release 2023 SP3affected
  • Release 2024 Golden to ≤ Release 2024 SP1affected
  • Release 2025 Golden to ≤ Release 2025 SP1affected

References