CVE-2025-6205KEV · OVERDUECWE-862

Missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025

Critical · published August 4, 2025

Patch now

Confirmed exploited, and the score agrees

CVSS calls it critical at 9.1. It is confirmed in active exploitation. It sits in the 99.5th percentile for exploit probability.

340
days past CISA
deadline
CVSS v3.1
9.1
EPSS
74%
Percentile
99.5
In the wild
Confirmed
What it is

🚨 A critical vulnerability lurking in DELMIA Apriso could let attackers stroll right into your system with full privileges! 🔥 Think of it like a hotel where the front desk forgets to check IDs. Any guest can waltz into the VIP lounge, access restricted areas, and throw a wild party without anyone batting an eye! If this vulnerability is exploited, an attacker could gain privileged access to sensitive data and operations within the application, potentially leading to disastrous consequences like data theft or unauthorized modifications—this is absolutely devastating! No one wants a party crasher throwing a wrench in their operations!

Put simply

Think of it like a hotel where the front desk forgets to check IDs. Any guest can waltz into the VIP lounge, access restricted areas, and throw a wild party without anyone batting an eye! This missing authorization flaw means that the application fails to properly check user permissions, allowing unauthorized users to access features they're not supposed to. It's a serious oversight that opens the door to attackers!

What to do

If this vulnerability is exploited, an attacker could gain privileged access to sensitive data and operations within the application, potentially leading to disastrous consequences like data theft or unauthorized modifications—this is absolutely devastating! No one wants a party crasher throwing a wrench in their operations! Immediate action required! Update DELMIA Apriso to the patched version as soon as possible and review your authorization checks to ensure that only legitimate users can access sensitive features. Don't let this vulnerability linger! You've got this! Take these steps, and you'll keep your application secure in no time. 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.73572 · 99.5th percentile
Weakness
CWE-862 · Missing Authorization
Published
2025-08-04T09:14Z
KEV added
2025-10-28 · due 2025-11-18
EPSS history
Timeline
  • 28 OCT 00:00Z
    Added to CISA KEV — remediate by Nov 18
    kev
  • 04 AUG 09:14Z
    Missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025
    cvelistv5