A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could lead to a remote code execution.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is in the KEV database since Sept. 11, 2025.

The EPSS score is 0.45387.

Exploitation active

Automatable no

Technical Impact total

Affected Vendors & Products

Vendors Products
3ds Subscribe
Delmia Apriso Subscribe

Configuration 1 [-]

cpe:2.3:a:3ds:delmia_apriso:*:*:*:*:*:*:*:*

No data.

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://isc.sans.edu/diary/Exploit+Attempts+for+Dassault+DELMIA+Apriso+CVE20255086/32256 cve-icon cve-icon
https://www.3ds.com/vulnerability/advisories cve-icon cve-icon
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-5086 cve-icon cve-icon
History

Wed, 22 Oct 2025 08:15:00 +0900

Type Values Removed Values Added
References

Wed, 22 Oct 2025 05:30:00 +0900

Type Values Removed Values Added
References

Wed, 22 Oct 2025 04:30:00 +0900

Type Values Removed Values Added
References

Fri, 12 Sep 2025 22:45:00 +0900

Type Values Removed Values Added
First Time appeared 3ds
3ds delmia Apriso
CPEs cpe:2.3:a:3ds:delmia_apriso:*:*:*:*:*:*:*:*
Vendors & Products 3ds
3ds delmia Apriso

Fri, 12 Sep 2025 04:15:00 +0900

Type Values Removed Values Added
References
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

 ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Fri, 12 Sep 2025 02:45:00 +0900

Type Values Removed Values Added
Metrics kev

{'dateAdded': '2025-09-11T00:00:00+00:00', 'dueDate': '2025-10-02T00:00:00+00:00'}

Thu, 05 Jun 2025 06:15:00 +0900

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 03 Jun 2025 15:30:00 +0900

Type Values Removed Values Added
Description A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could lead to a remote code execution. A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could lead to a remote code execution.
Metrics cvssV3_1

{'score': 10, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H'}

 cvssV3_1

{'score': 9, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H'}

Tue, 03 Jun 2025 03:00:00 +0900

Type Values Removed Values Added
Description A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could lead to a remote code execution.
Title Deserialization of Untrusted Data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025
Weaknesses CWE-502
References
Metrics cvssV3_1

{'score': 10, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: 3DS

Published:

Updated: 2025-10-21T22:55:14.039Z

Reserved: 2025-05-22T11:43:30.702Z

Link: CVE-2025-5086

cve-icon Vulnrichment

Updated: 2025-06-04T20:18:00.570Z

cve-icon NVD

Status : Analyzed

Published: 2025-06-02T18:15:25.010

Modified: 2025-10-29T13:50:15.843

Link: CVE-2025-5086

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses