{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: Dassault Systèmes vulnerabilities","home_page_url":"https://patchfirst.co/vendor/dassault-systemes/","feed_url":"https://patchfirst.co/feed/vendor/dassault-systemes.json","description":"New and newly exploited Dassault Systèmes CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2025-6205#kev","url":"https://patchfirst.co/cve/CVE-2025-6205/","title":"[KEV] CVE-2025-6205: Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability","content_text":"Dassault Systèmes · DELMIA Apriso. In CISA KEV since 2025-10-28. ENISA EUVD lists it as exploited. EPSS 73.7% (higher than 99.47% of CVEs). CVSS 9.1 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1068 Exploitation for Privilege Escalation. Priority 69.3 of 100.","summary":"Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability","date_published":"2025-10-28T00:00:00.000Z","date_modified":"2026-06-17T10:01:22.000Z","tags":["kev","public-exploit","T1190","T1068"],"_patchfirst":{"reason":"kev","priority":69.3,"kev":{"dateAdded":"2025-10-28","ransomware":false},"epss":{"score":0.73672,"percentile":0.99471},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"Dassault Systèmes","product":"DELMIA Apriso","techniqueIds":["T1190","T1068"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-6204#kev","url":"https://patchfirst.co/cve/CVE-2025-6204/","title":"[KEV] CVE-2025-6204: Dassault Systèmes DELMIA Apriso Code Injection Vulnerability","content_text":"Dassault Systèmes · DELMIA Apriso. In CISA KEV since 2025-10-28. ENISA EUVD lists it as exploited. EPSS 79.6% (higher than 99.6% of CVEs). CVSS 8.0 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 68.5 of 100.","summary":"Dassault Systèmes DELMIA Apriso Code Injection Vulnerability","date_published":"2025-10-28T00:00:00.000Z","date_modified":"2026-06-17T10:01:22.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":68.5,"kev":{"dateAdded":"2025-10-28","ransomware":false},"epss":{"score":0.79551,"percentile":0.99603},"cvss":{"score":8,"severity":"HIGH","version":"3.1"},"vendor":"Dassault Systèmes","product":"DELMIA Apriso","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-5086#kev","url":"https://patchfirst.co/cve/CVE-2025-5086/","title":"[KEV] CVE-2025-5086: Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability","content_text":"Dassault Systèmes · DELMIA Apriso. In CISA KEV since 2025-09-11. ENISA EUVD lists it as exploited. EPSS 97.0% (higher than 99.89% of CVEs). CVSS 9.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.3 of 100.","summary":"Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability","date_published":"2025-09-11T00:00:00.000Z","date_modified":"2026-06-17T09:47:10.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":69.3,"kev":{"dateAdded":"2025-09-11","ransomware":false},"epss":{"score":0.97039,"percentile":0.99891},"cvss":{"score":9,"severity":"CRITICAL","version":"3.1"},"vendor":"Dassault Systèmes","product":"DELMIA Apriso","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}}]}