CVE-2025-5086
KEVDassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability
View CVE record →- Vendor / Project
- Dassault Systèmes
- Product
- DELMIA Apriso
- Date added
- Sep 11, 2025
- Due date
- Oct 2, 2025
- Known ransomware use
- Unknown
- CWEs
- CWE-502
Description
Dassault Systèmes DELMIA Apriso contains a deserialization of untrusted data vulnerability that could lead to a remote code execution.
Required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.