CVE-2023-2140

7.5 highEPSS 0.6%

High (7.5) in 3ds delmia apriso. EPSS 0.6% chance of exploitation in the next 30 days.

A Server-Side Request Forgery vulnerability in DELMIA Apriso Release 2017 through Release 2022 could allow an unauthenticated attacker to issue requests to arbitrary hosts on behalf of the server running the DELMIA Apriso application.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
CWE: CWE-918
Published: 2023-04-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

3ds:delmia_apriso

References

https://www.3ds.com/vulnerability/advisories
https://www.3ds.com/vulnerability/advisories

Check your stack JSON