DELMIA Apriso - Broken Access Control

CVE-2025-6205

Verified

Description

DELMIA Apriso Release 2020 through Release 2025 contains a broken access control vulnerability caused by missing authorization, letting attackers gain privileged access to the application, exploit requires no special conditions.

Severity

High

CVSS Score

8.8

Exploit Probability

74%

Published Date

September 23, 2025

Template Author

iamnoooob, rootxharsh, parthmalhotra

CVE-2025-6205.yaml

8.8Score

CVSS Metrics

CVSS Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVE ID:

cve-2025-6205

CWE ID:

cwe-862

References

https://nvd.nist.gov/vuln/detail/CVE-2025-6205 https://www.3ds.com/trust-center/security/security-advisories/cve-2025-6205 https://projectdiscovery.io/blog/remote-code-execution-in-delmia-apriso

Remediation Steps

Apply security patches from DELMIA for Release 2020 through Release 2025 to address missing authorization checks on message processing endpoints.

DELMIA Apriso - Broken Access Control

Description

Severity

CVSS Score

Exploit Probability

Published Date

Template Author

Nuclei Template

CVSS Metrics

References

Remediation Steps

DELMIA Apriso - Broken Access Control

Description

Severity

CVSS Score

Exploit Probability

Published Date

Template Author

Nuclei Template

CVSS Metrics

References

Remediation Steps