[ Vendor · 10 CVEs ]
Dassault Systèmes
CVEs affecting Dassault Systèmes published in the last 30 days, plus any Dassault Systèmes CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-105410 | 12 Oct 2026 | CVSS 8.7 | Dassault Systèmes Tuleap Enterprise EditionA Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute… | |
| CVE-2026-105411 | 12 Oct 2026 | CVSS 8.1 | Dassault Systèmes Tuleap Enterprise EditionAn Authorization Bypass Through User-Controlled Key vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker… | |
| CVE-2026-105412 | 12 Oct 2026 | CVSS 7.1 | Dassault Systèmes Tuleap Enterprise EditionAn SQL Injection vulnerability affecting Tuleap Enterprise Edition 17.5 could allow an attacker to have read access the Tuleap database. | |
| CVE-2026-105407 | 12 Oct 2026 | CVSS 8.8 | Dassault Systèmes Tuleap Enterprise EditionAn OS Command Injection vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute arbitrary… | |
| CVE-2026-105408 | 12 Oct 2026 | CVSS 8.7 | Dassault Systèmes Tuleap Enterprise EditionA Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute… | |
| CVE-2026-105409 | 12 Oct 2026 | CVSS 8.7 | Dassault Systèmes Tuleap Enterprise EditionA Stored Cross-site Scripting (XSS) vulnerability affecting Tuleap Enterprise Edition from 17.0 through 17.5 could allow an attacker to execute… | |
| CVE-2026-84154 | 29 Sep 2026 | CVSS 9.9 | Dassault Systèmes GEOVIA Geospatial Data ManagerA Code Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x could… | |
| CVE-2025-6205 | 4 Aug 2025 | CVSS 9.1 | Dassault Systèmes DELMIA Apriso Missing AuthorizationA missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to gain privileged… | Exploited |
| CVE-2025-6204 | 4 Aug 2025 | CVSS 8.0 | Dassault Systèmes DELMIA Apriso Code InjectionAn Improper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow… | Exploited |
| CVE-2025-5086 | 2 Jun 2025 | CVSS 9.0 | Dassault Systèmes DELMIA Apriso Deserialization of Untrusted DataA deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could lead to a remote code… | Exploited |