CVE-2023-2140: 3ds DELMIA Apriso

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

A Server-Side Request Forgery vulnerability in DELMIA Apriso Release 2017 through Release 2022 could allow an unauthenticated attacker to issue requests to arbitrary hosts on behalf of the server running the DELMIA Apriso application.

Affected products

• 3ds DELMIA Apriso: from 2017, up to and including 2022

Published 2023-04-21. Last modified 2026-06-17.