Description
An unsafe .NET object deserialization vulnerability in DELMIA Apriso Release 2019 through Release 2024 could lead to post-authentication remote code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dassault Systèmes | DELMIA Apriso | Release 2019 Golden – ≤ Release 2019 SP5, Release 2020 Golden – ≤ Release 2020 SP4, Release 2021 Golden – ≤ Release 2021 SP3, Release 2022 Golden – ≤ Release 2022 SP3, Release 2023 Golden – ≤ Release 2023 SP2, Release 2024 Golden – ≤ Release 2024 SP1 | — |