What is CVE-2023-2140?

CVE-2023-2140 is a high-severity vulnerability in 3ds Delmia_apriso, classified under Server-Side Request Forgery (SSRF). CVSS score: 7.5/10. Published 2023-04-21.

How severe is CVE-2023-2140?

High severity. CVSS v3 base score is 7.5 out of 10.

SSRF in 3ds Delmia_apriso

CVE-2023-2140

A Server-Side Request Forgery vulnerability in DELMIA Apriso Release 2017 through Release 2022 could allow an unauthenticated attacker to issue requests to arbitrary hosts on behalf of the server running the DELMIA Apriso application.

Vulnerability class: SSRF (Server-Side Request Forgery)

EPSS: 0.006 (43.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

3ds Delmia_apriso
Dassault Systèmes Delmia Apriso — versions Apriso 2017 Golden, Apriso 2018 Golden, Apriso 2019 Golden

Weakness classification (CWE)

CWE-918 — Server-Side Request Forgery (SSRF)

References

3DS.Information-Security@3ds.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-2140?: CVE-2023-2140 is a high-severity vulnerability in 3ds Delmia_apriso, classified under Server-Side Request Forgery (SSRF). CVSS score: 7.5/10. Published 2023-04-21.
How severe is CVE-2023-2140?: High severity. CVSS v3 base score is 7.5 out of 10.