Known exploited vulnerabilities
Dassault Systèmes vulnerabilities attackers have used
Every Dassault Systèmes vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.
The short answer
CISA lists 3 Dassault Systèmes vulnerabilities as exploited in the wild, 0 of them added in the last 12 months. The most recent is CVE-2025-6205, added Oct 28, 2025. DELMIA Apriso has the most entries (3).
- In KEV, all time
- 3
- Added, last 12 months
- 0
- Used in ransomware
- 0
- New CVEs this week
- 0
Every Dassault Systèmes entry in CISA KEV
CVE-2025-6205
Added · dueDassault Systèmes DELMIA Apriso Missing Authorization Vulnerability
Dassault Systèmes DELMIA Apriso contains a missing authorization vulnerability that could allow an attacker to gain privileged access to the application.
CVE-2025-6204
Added · dueDassault Systèmes DELMIA Apriso Code Injection Vulnerability
Dassault Systèmes DELMIA Apriso contains a code injection vulnerability that could allow an attacker to execute arbitrary code.
CVE-2025-5086
Added · dueDassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability
Dassault Systèmes DELMIA Apriso contains a deserialization of untrusted data vulnerability that could lead to a remote code execution.
Related
Know the day a CVE lands in your code
Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.