CVE-2023-2140

HIGH

DELMIA Apriso 2017-2022 - Unauthenticated Server-Side Request Forgery

Title source: llm

Description

A Server-Side Request Forgery vulnerability in DELMIA Apriso Release 2017 through Release 2022 could allow an unauthenticated attacker to issue requests to arbitrary hosts on behalf of the server running the DELMIA Apriso application.

References (1)

Core 1

Core References

Vendor Advisory

https://www.3ds.com/vulnerability/advisories

Scores

CVSS v3 7.5

EPSS 0.0056

EPSS Percentile 42.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-918

Status published

Products (1)

3ds/delmia_apriso 2017 - 2022

Published Apr 21, 2023

Tracked Since Feb 18, 2026