Vendor
Dassault Systèmes
113 known vulnerabilities in products by Dassault Systèmes, 3 of them actively exploited (CISA KEV).
Key figures
113
Vulnerabilities
3
Actively exploited (KEV)
0
Used by ransomware
16
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-6205 | Missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 In CISA KEValso in 1 other product | 9.1 | |
| Critical | CVE-2025-5086 | Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability In CISA KEValso in 1 other product | 9.0 | |
| Critical | CVE-2025-6204 | Dassault Systèmes DELMIA Apriso Code Injection Vulnerability In CISA KEValso in 1 other product | 8.0 | |
| High | CVE-2026-105407 | OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 | 8.8 | |
| High | CVE-2026-84285 | OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.3 through 17.5 | 8.8 | |
| Critical | CVE-2024-3300 | Dassault Systèmes DELMIA Apriso: Deserialization of Untrusted Data | 9.0 | |
| Critical | CVE-2024-1624 | Dassault Systèmes Documentation server: OS Command Injection | 9.4 | |
| Critical | CVE-2026-17061 | Dassault Systèmes SIMULIA Execution Engine: Deserialization of Untrusted Data | 10.0 | |
| High | CVE-2023-1997 | Dassault Systèmes SIMULIA 3DOrchestrate: OS Command Injection | 8.8 | |
| Critical | CVE-2026-11756 | Dassault Systèmes Station Launcher App in 3DEXPERIENCE platform: Deserialization of Untrusted Data | 10.0 | |
| Critical | CVE-2023-6078 | Dassault Systèmes BIOVIA Materials Studio products: OS Command Injection | 8.8 | |
| Critical | CVE-2026-9695 | Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026 | 9.8 | |
| Critical | CVE-2026-84154 | Dassault Systèmes GEOVIA Geospatial Data Manager: Code Injection | 9.9 | |
| Critical | CVE-2025-9976 | Dassault Systèmes Station Launcher App in 3DEXPERIENCE platform: OS Command Injection | 9.0 | |
| Critical | CVE-2026-7858 | Dassault Systèmes Magic Collaboration Studio: Deserialization of Untrusted Data | 9.8 | |
| Critical | CVE-2026-16279 | Dassault Systèmes 3DSwymer: Improper Authorization | 9.3 | |
| High | CVE-2023-2141 | Unsafe .NET object deserialization affecting DELMIA Apriso Release 2017 through Release 2022 | 8.5 | |
| Critical | CVE-2023-1287 | ENOVIA Live Collaboration V6R2013xE is affected by an XSL template injection vulnerability | 9.0 | |
| Critical | CVE-2026-10094 | Dassault Systèmes SOLIDWORKS Visualize: Path Traversal | 9.8 | |
| High | CVE-2026-105410 | Dassault Systèmes Tuleap Enterprise Edition: Cross-site Scripting | 8.7 | |
| High | CVE-2026-105409 | Dassault Systèmes Tuleap Enterprise Edition: Cross-site Scripting | 8.7 | |
| High | CVE-2026-105408 | Dassault Systèmes Tuleap Enterprise Edition: Cross-site Scripting | 8.7 | |
| High | CVE-2026-105411 | Dassault Systèmes Tuleap Enterprise Edition: Authorization Bypass Through User-Controlled Key | 8.1 | |
| High | CVE-2024-3301 | Dassault Systèmes DELMIA Apriso: Deserialization of Untrusted Data | 8.5 | |
| High | CVE-2026-19851 | Use of Default Password vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 | 7.7 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 32sans-atrisk-mail,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 30sans-atrisk-mail,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 27sans-atrisk-mail,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 25sans-atrisk-mail,