Active Exploits Hit Dassault and XWiki — CISA Confirms Critical Flaws Under Attack
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-24893 | Unauthenticated RCE via Eval Injection in XWiki Platform SolrSearch | 9.8 | 100% | KEVPoC | KEV |
| CVE-2025-5086 | Deserialization of Untrusted Data RCE in Dassault Systèmes DELMIA Apriso | 9.0 | 97% | KEVPoC | KEV |
CVE-2025-6205+1 related CVE | Missing Authorization in Dassault Systèmes DELMIA Apriso Grants Privileged Access | 9.1 group max | 74% | KEV | KEV |
From the original article
2 min read at thehackernews.com
Threat actors are actively exploiting multiple security flaws impacting Dassault Systèmes DELMIA Apriso and XWiki, according to alerts issued by the U. S. Cybersecurity and Infrastructure Security Agency ( CISA ) and VulnCheck .
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.