CVE detail
CVE-2025-5086 — Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability
Published 2025-09-11 · Modified 2025-09-11 · Source kev
HIGH
severity
CVSS-derived band
0.8975
EPSS probability
exploitation probability, 30d
100.0%
EPSS percentile
percentile vs all CVEs
LISTED
CISA KEV
due 2025-10-02
⚠ Actively exploited in the wild — CISA KEV listed 2025-09-11, federal remediation due 2025-10-02.
Description
Dassault Systèmes DELMIA Apriso contains a deserialization of untrusted data vulnerability that could lead to a remote code execution.
Remediation
No vendor-published fix data in our corpus for this CVE. Check the references below or the vendor's PSIRT / security advisories page.
References