Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability

概要

参考情報

• 3ds.com/vulnerability/advisories · Vendor Advisory
• isc.sans.edu/diary/Exploit+Attempts+for+Dassault+DELMIA+Apriso+CVE20255086/32256 · Exploit
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2025-5086

delmia apriso のその他の脆弱性

• CVE-2025-6205緊急 9.1悪用確認済み（CISA KEV）A missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to gain privile…
• CVE-2025-6204高 8.0悪用確認済み（CISA KEV）An Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 coul…
• CVE-2024-0935高 7.5Insertion of Sensitive Information into Log File vulnerabilities are affecting DELMIA Apriso Release 2019 through Release 2024
• CVE-2023-2141高 8.8An unsafe .NET object deserialization in DELMIA Apriso Release 2017 through Release 2022 could lead to post-authentication remote code execu…
• CVE-2023-2140高 7.5A Server-Side Request Forgery vulnerability in DELMIA Apriso Release 2017 through Release 2022 could allow an unauthenticated attacker to…