Axxonsoft vulnerabilities

Products

• Axxon One 8
• Axxonone C-werk 7
• Axxon One 3

Newest

• axxonsoft axxonnet Read-Only Shared Token Allows Modification of Monitoring Alerts in AxxonNet CVE-2026-121024 5.3 MediumNovember 3, 2026
• axxonsoft axxonnet arp agent LDAP Bind Password Exposure in AxxonNet ARP Agent Logs CVE-2026-121023 6.8 MediumNovember 3, 2026
• axxonsoft axxon one Default Administrator Password Change Not Enforced in Axxon One Web Client CVE-2026-121022 9.2 CriticalNovember 3, 2026
• axxonsoft axxon one Plaintext Storage of LDAP Password in Axxon One Shared Configuration CVE-2026-121021 6.8 MediumNovember 3, 2026
• axxonsoft axxon one User and Role Enumeration by Low-Privileged Users in Axxon One Security Configuration API CVE-2026-121020 5.3 MediumNovember 3, 2026
• axxonsoft axxon one, axxonone c-werk +1 more Lack of Encryption in Object Archive in AxxonSoft Axxon One (C-Werk) before 2.0.8 CVE-2025-10227 5.1 MediumSeptember 10, 2025
• axxonsoft axxon one, axxonone c-werk +1 more PostgreSQL Upgrade from v10 to v17.4 in AxxonSoft Axxon One (C-Werk) 2.0.8 and earlier to Address Multiple Vulnerabilities CVE-2025-10226 9.3 CriticalSeptember 10, 2025
• axxonsoft axxon one, axxonone c-werk +1 more Incorrect Memory Allocation in OpenSSL-Based Session Module in AxxonSoft Axxon One (C-Werk) CVE-2025-10225 8.7 HighSeptember 10, 2025
• axxonsoft axxon one, axxonone c-werk +1 more Incorrect Evaluation of LDAP Nested Groups during Login in AxxonSoft Axxon One (C-Werk) CVE-2025-10224 5.3 MediumSeptember 10, 2025
• axxonsoft axxon one, axxonone c-werk +1 more Improper Session Cleanup on Role Removal in Web Admin Panel in AxxonSoft Axxon One (C-Werk) CVE-2025-10223 5.3 MediumSeptember 10, 2025
• axxonsoft axxon one, axxonone c-werk +1 more Sensitive Information Disclosure in Diagnostic Dumps in AxxonSoft Axxon One VMS CVE-2025-10222 4.8 MediumSeptember 10, 2025
• axxonsoft axxon one, axxonnet arp agent c-werknet +1 more Hardcoded Password Exposure in AxxonNet (C-WerkNet) ARP Agent Logs CVE-2025-10221 6.7 MediumSeptember 10, 2025
• axxonsoft axxon one, axxonone c-werk +1 more Outdated Third-Party NuGet Packages in AxxonSoft Axxon One VMS 2.0.0 through 2.0.4 CVE-2025-10220 9.3 CriticalSeptember 10, 2025
• axxonsoft next AxxonSoft Axxon Next has Directory Traversal via an initial /css//..%2f substring in a URI. CVE-2018-7467 EPSS 10.2% 7.5 HighFebruary 27, 2018