Dassault Systèmes

Products

Exploited and recent CVEs

  • CVE-2025-6205 Critical 9.1 Exploited Missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 67.2%
  • CVE-2025-6204 High 8.0 Exploited Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 76.6%
  • CVE-2025-5086 Critical 9.0 Exploited Deserialization of Untrusted Data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 97.1%
  • CVE-2026-105412 High 7.1 SQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5 0.2%
  • CVE-2026-105411 High 8.1 Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 0.2%
  • CVE-2026-105410 High 8.7 Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 0.2%
  • CVE-2026-105409 High 8.7 Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 0.2%
  • CVE-2026-105408 High 8.7 Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 0.2%
  • CVE-2026-105407 High 8.8 OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 1.8%
  • CVE-2026-84154 Critical 9.9 Code Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x 0.4%
  • CVE-2026-84285 High 8.8 OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.3 through 17.5 1.8%
  • CVE-2026-16279 Critical 9.3 Improper Authorization vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x 0.4%
  • CVE-2026-19851 High 7.7 Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 0.3%
  • CVE-2026-17061 Critical 10.0 Deserialization of Untrusted Data Vulnerability in SIMULIA Execution Engine from Release 2023 through Release 2026 0.8%
  • CVE-2026-11756 Critical 10.0 Deserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x 0.8%
  • CVE-2026-14165 High 7.5 Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 0.4%
  • CVE-2026-9695 Critical 9.8 Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026 0.6%
  • CVE-2026-5120 High 8.1 Race Condition vulnerability affecting BIOVIA Workbook from Release 2021 through Release 2026 0.3%
  • CVE-2026-10094 Critical 9.8 Path Traversal vulnerability affecting SOLIDWORKS Visualize from SOLIDWORKS Desktop Release 2024 through SOLIDWORKS Desktop Release 2026 0.4%
  • CVE-2026-9024 High 8.7 Stored Cross-site Scripting (XSS) vulnerability affecting Process Experience Studio in DELMIA Service Process Engineer from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x 0.2%
  • CVE-2026-7858 Critical 9.8 Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x through CATIA Magic Release 2026x 0.5%
  • CVE-2026-7858 Critical 9.8 Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x through CATIA Magic Release 2026x 0.5%
  • CVE-2026-7858 Critical 9.8 Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x through CATIA Magic Release 2026x 0.5%
  • CVE-2026-7858 Critical 9.8 Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x through CATIA Magic Release 2026x 0.5%
  • CVE-2026-7858 Critical 9.8 Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x through CATIA Magic Release 2026x 0.5%
  • CVE-2025-10559 High 7.1 Path Traversal vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x 0.3%
  • CVE-2025-10553 High 8.7 Stored Cross-site Scripting (XSS) vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x 0.2%
  • CVE-2025-10551 High 8.7 Stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2025x 0.2%
  • CVE-2026-3476 High 7.8 Code Injection vulnerability affecting SOLIDWORKS Desktop from Release 2025 through Release 2026 0.2%
  • CVE-2026-2101 High 8.7 Reflected Cross-site Scripting (XSS) vulnerability affecting ENOVIAvpm Web Access from ENOVIAvpm Version 1 Release 16 through ENOVIAvpm Version 1 Release 19 0.3%