Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2023-2140

Server-Side Request Forgery vulnerability affecting DELMIA Apriso Release 2017 through Release 2022

High7.5EPSS 0.56%
Published
Updated
Reserved
Assigned by
3DS

Description

A Server-Side Request Forgery vulnerability in DELMIA Apriso Release 2017 through Release 2022 could allow an unauthenticated attacker to issue requests to arbitrary hosts on behalf of the server running the DELMIA Apriso application.

Scores

CVSS scores of CVE-2023-2140, by who scored it
Scored byCVSSScoreVector
3DSCNA (assigner)3.1High7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVDNVD · Modified3.1High7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS (exploitation in 30 days)
0.56% · top 53% of all CVEs (5 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: yes · Technical impact: partial
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.

Weakness

Affected products

  • Dassault Systèmes · DELMIA Apriso

    • affected Apriso 2017 Golden – ≤ Apriso 2017 SP7
    • affected Apriso 2018 Golden – ≤ Apriso 2018 SP4
    • affected Apriso 2019 Golden – ≤ Apriso 2019 SP5
    • affected Apriso 2020 Golden – ≤ Apriso 2020 SP4
    • affected Apriso 2021 Golden – ≤ Apriso 2021 SP2
    • affected Apriso 2022 Golden

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2023-2140 badge
[![CVE-2023-2140](https://trackcve.app/badge/CVE-2023-2140.svg)](https://trackcve.app/cve/CVE-2023-2140)

Record last updated .