Skip to content
OpenAdvisories

Vendor

Dassault Systèmes

113 known vulnerabilities.

Products

ENOVIA Collaborative Industry Innovator 20 SOLIDWORKS eDrawings 16 3DSwymer 15 DELMIA Apriso 10 Tuleap Enterprise Edition 9 SOLIDWORKS Desktop 4 eDrawings 4 Teamwork Cloud - Standard Edition 3 Teamwork Cloud - Business Edition 3 Teamwork Cloud - Business Pro Edition 3 Teamwork Cloud - Enterprise Edition 3 Product Manager 3 ENOVIA Live Collaboration 2 Station Launcher App in 3DEXPERIENCE platform 2 DELMIA Service Process Engineer 2 Project Portfolio Manager 2 DELMIA Factory Resource Manager 2 Collaborative Industry Innovator 2 City Referential Manager 2 SIMULIA 3DOrchestrate 1 3DEXPERIENCE 1 Magic Collaboration Studio 1 SOLIDWORKS Visualize 1 ENOVIAvpm Web Access 1 ENOVIA Product Manager 1 Multidisciplinary Optimization Engineer 1 Documentation server 1 ENOVIA Specification Manager 1 GEOVIA Geospatial Data Manager 1 ENOVIA Change Manager 1 ENOVIA Product Engineering Specialist 1 SIMULIA Execution Engine 1 BIOVIA Workbook 1 Service Process Engineer 1 BIOVIA Materials Studio products 1
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Critical 9.9
    CVE-2026-84154

    Code Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x

    A Code Injection vulnerability affecting GEOVIA Geospatial Data Manager from Release 3DEXPERIENCE R2024x through Release 3DEXPERIENCE R2026x could allow an attacker to execute arbitrary code on the server.

    Dassault Systèmes GEOVIA Geospatial Data Manager
  • Critical 9.3
    CVE-2026-16279

    Improper Authorization vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x

    An Improper Authorization vulnerability affecting 3DPassport in 3DSwymer from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x could allow an attacker to gain access to some user accounts.

    Dassault Systèmes 3DSwymer
  • Critical 10.0
    CVE-2026-17061

    Deserialization of Untrusted Data Vulnerability in SIMULIA Execution Engine from Release 2023 through Release 2026

    A Deserialization of Untrusted Data vulnerability affecting SIMULIA Execution Engine from Release 2023 through Release 2026 could lead to an unauthenticated remote code execution.

    Dassault Systèmes SIMULIA Execution Engine
  • Critical 10.0
    CVE-2026-11756

    Deserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x

    A Deserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x could lead to an unauthenticated remote code execution.

    Dassault Systèmes Station Launcher App in 3DEXPERIENCE platform
  • Critical 9.8
    CVE-2026-9695

    Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026

    An Improper Authentication vulnerability affecting DELMIA Apriso from Release 2020 through Release 2026 could allow an attacker to gain privileged access to the server.

    Dassault Systèmes DELMIA Apriso
  • Critical 9.8
    CVE-2026-10094

    Path Traversal vulnerability affecting SOLIDWORKS Visualize from SOLIDWORKS Desktop Release 2024 through SOLIDWORKS Desktop Release 2026

    A Path Traversal vulnerability affecting SOLIDWORKS Visualize from SOLIDWORKS Desktop Release 2024 through SOLIDWORKS Desktop Release 2026 could allow an attacker to write arbitrary files on the server.

    Dassault Systèmes SOLIDWORKS Visualize
  • Critical 9.8
    CVE-2026-7858

    Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x through CATIA Magic Release 2026x

    A Deserialization of Untrusted Data vulnerability affecting Teamwork Cloud from No Magic Release 2022x through No Magic Release 2026x and Magic Collaboration Studio from CATIA Magic Release 2022x through CATIA Magic Release 2026x could lead to an unauthentica…

    Dassault Systèmes Teamwork Cloud - Standard Edition Teamwork Cloud - Business Pro Edition Teamwork Cloud - Business Edition
  • Critical 9.0
    CVE-2025-9976

    OS Command Injection vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x

    An OS Command Injection vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2025x could allow an attacker to execute arbitrary code on the user's machine.

    Dassault Systèmes Station Launcher App in 3DEXPERIENCE platform
  • Critical 9.1
    CVE-2025-6205 Exploited Scanner template EPSS 67%

    Missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025

    A missing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could allow an attacker to gain privileged access to the application.

    Dassault Systèmes DELMIA Apriso
    KEV Oct 28, 2025
  • Critical 9.0
    CVE-2025-5086 Exploited Scanner template EPSS 97%

    Deserialization of Untrusted Data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025

    A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could lead to a remote code execution.

    Dassault Systèmes DELMIA Apriso
    KEV Sep 11, 2025
  • Critical 9.0
    CVE-2024-3300 Scanner template

    Pre-authentication Unsafe .NET object deserialization vulnerability affecting DELMIA Apriso Release 2019 through Release 2024

    An unsafe .NET object deserialization vulnerability in DELMIA Apriso Release 2019 through Release 2024 could lead to pre-authentication remote code execution.

    Dassault Systèmes DELMIA Apriso
  • Critical 9.4
    CVE-2024-1624

    OS Command Injection vulnerability affecting documentation server on certain Releases of 3DEXPERIENCE, SIMULIA Abaqus, SIMULIA Isight and CATIA Composer

    An OS Command Injection vulnerability affecting documentation server on 3DEXPERIENCE from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x, SIMULIA Abaqus from Release 2022 through Release 2024, SIMULIA Isight from Release 2022 through Release …

    Dassault Systèmes Documentation server
  • Critical 9.0
    CVE-2023-1287

    ENOVIA Live Collaboration V6R2013xE is affected by an XSL template injection vulnerability

    An XSL template vulnerability in ENOVIA Live Collaboration V6R2013xE allows Remote Code Execution.

    Dassault Systèmes ENOVIA Live Collaboration