Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability

Mô tả

Tham khảo

• 3ds.com/vulnerability/advisories · Vendor Advisory
• isc.sans.edu/diary/Exploit+Attempts+for+Dassault+DELMIA+Apriso+CVE20255086/32256 · Exploit
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2025-5086

Lỗ hổng khác của delmia apriso

• CVE-2025-6205NGHIÊM TRỌNG 9.1ĐANG BỊ KHAI THÁC (CISA KEV)A missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to gain privile…
• CVE-2025-6204CAO 8.0ĐANG BỊ KHAI THÁC (CISA KEV)An Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 coul…
• CVE-2024-0935CAO 7.5Insertion of Sensitive Information into Log File vulnerabilities are affecting DELMIA Apriso Release 2019 through Release 2024
• CVE-2023-2141CAO 8.8An unsafe .NET object deserialization in DELMIA Apriso Release 2017 through Release 2022 could lead to post-authentication remote code execu…
• CVE-2023-2140CAO 7.5A Server-Side Request Forgery vulnerability in DELMIA Apriso Release 2017 through Release 2022 could allow an unauthenticated attacker to…