Vendor
Dassault Systèmes
61 known vulnerabilities in products by Dassault Systèmes, 3 of them actively exploited (CISA KEV).
Key figures
61
Vulnerabilities
3
Actively exploited (KEV)
0
Used by ransomware
8
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-6205 | Missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 In CISA KEValso in 1 other product | 9.1 | |
| Critical | CVE-2025-5086 | Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability In CISA KEValso in 1 other product | 9.0 | |
| Critical | CVE-2025-6204 | Dassault Systèmes DELMIA Apriso Code Injection Vulnerability In CISA KEValso in 1 other product | 8.0 | |
| Critical | CVE-2014-2072 | Dassault Systèmes Catia: Stack-Based Buffer Overflow | 9.8 | |
| Critical | CVE-2014-2073 | Dassault Systèmes Catia: Stack-Based Buffer Overflow | 9.8 | |
| High | CVE-2023-1997 | Dassault Systèmes SIMULIA 3DOrchestrate: OS Command Injection | 8.8 | |
| Critical | CVE-2023-6078 | Dassault Systèmes BIOVIA Materials Studio products: OS Command Injection | 8.8 | |
| High | CVE-2023-2141 | Unsafe .NET object deserialization affecting DELMIA Apriso Release 2017 through Release 2022 | 8.5 | |
| Critical | CVE-2023-1287 | ENOVIA Live Collaboration V6R2013xE is affected by an XSL template injection vulnerability | 9.0 | |
| High | CVE-2024-12089 | Dassault Systèmes ENOVIA Collaborative Industry Innovator: Cross-site Scripting | 8.7 | |
| High | CVE-2025-10553 | Dassault Systèmes DELMIA Factory Resource Manager: Cross-site Scripting | 8.7 | |
| High | CVE-2025-10551 | Dassault Systèmes ENOVIA Collaborative Industry Innovator: Cross-site Scripting | 8.7 | |
| High | CVE-2023-2140 | Server-Side Request Forgery vulnerability affecting DELMIA Apriso Release 2017 through Release 2022 | 7.5 | |
| High | CVE-2024-6378 | Dassault Systèmes ENOVIA Collaborative Industry Innovator: Cross-site Scripting | 8.7 | |
| High | CVE-2025-12956 | Dassault Systèmes ENOVIA Collaborative Industry Innovator: Cross-site Scripting | 8.7 | |
| High | CVE-2025-10554 | Dassault Systèmes ENOVIA Product Manager: Cross-site Scripting | 8.7 | |
| High | CVE-2024-12092 | Dassault Systèmes ENOVIA Collaborative Industry Innovator: Cross-site Scripting | 8.7 | |
| High | CVE-2024-12091 | Dassault Systèmes ENOVIA Collaborative Industry Innovator: Cross-site Scripting | 8.7 | |
| High | CVE-2024-12090 | Dassault Systèmes ENOVIA Collaborative Industry Innovator: Cross-site Scripting | 8.7 | |
| High | CVE-2020-25507 | Dassault Systèmes Teamwork Cloud: Code Execution | 7.8 | |
| High | CVE-2025-10558 | Dassault Systèmes 3DSwymer: Cross-site Scripting | 8.7 | |
| High | CVE-2025-10552 | Dassault Systèmes 3DSwymer: Cross-site Scripting | 8.7 | |
| High | CVE-2025-10557 | Dassault Systèmes ENOVIA Collaborative Industry Innovator: Cross-site Scripting | 8.7 | |
| High | CVE-2025-10556 | Dassault Systèmes ENOVIA Specification Manager: Cross-site Scripting | 8.7 | |
| High | CVE-2026-1334 | Dassault Systèmes SOLIDWORKS eDrawings: Out-of-bounds Read | 7.8 |
Products
| Dassault Systèmes ENOVIA Collaborative Industry Innovator | 22 | 0 |
| Dassault Systèmes 3DSwymer | 11 | 0 |
| Dassault Systèmes DELMIA Apriso | 7 | 3 |
| Dassault Systèmes SOLIDWORKS eDrawings | 3 | 0 |