Known exploited vulnerabilities

Dassault Systèmes vulnerabilities attackers have used

Every Dassault Systèmes vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 3 Dassault Systèmes vulnerabilities as exploited in the wild, 0 of them added in the last 12 months. The most recent is CVE-2025-6205, added Oct 28, 2025. DELMIA Apriso has the most entries (3).

In KEV, all time
3
Added, last 12 months
0
Used in ransomware
0
New CVEs this week
0

Every Dassault Systèmes entry in CISA KEV

  1. CVE-2025-6205

    Added · due

    Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability

    Dassault Systèmes DELMIA Apriso contains a missing authorization vulnerability that could allow an attacker to gain privileged access to the application.

  2. CVE-2025-6204

    Added · due

    Dassault Systèmes DELMIA Apriso Code Injection Vulnerability

    Dassault Systèmes DELMIA Apriso contains a code injection vulnerability that could allow an attacker to execute arbitrary code.

  3. CVE-2025-5086

    Added · due

    Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability

    Dassault Systèmes DELMIA Apriso contains a deserialization of untrusted data vulnerability that could lead to a remote code execution.

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.