Browse CVEs

CRITICAL 9.8 CVE-2025-10226 Dependency on Vulnerable Third-Party Component (CWE-1395) in the PostgreSQL backend in AxxonSoft Axxon One (C-Werk) 2.0.8 and earlier on Windows and … Axxon One after 2.0.8 Fix from $2,3002025-09-10 HIGH 8.1 CVE-2025-10223 Insufficient Session Expiration (CWE-613) in the Web Admin Panel in AxxonSoft Axxon One (C-Werk) prior to 2.0.3 on Windows allows a local or remote a… Axxon One after 2.0.2 Fix from $1,9502025-09-10 HIGH 7.5 CVE-2025-10225 Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119) in the OpenSSL-based session module in AxxonSoft Axxon One (C-Werk)… Axxon One after 2.0.6 Fix from $1,9502025-09-10 HIGH 7.1 CVE-2025-10224 Improper Authentication (CWE-287) in the LDAP authentication engine in AxxonSoft Axxon One (C-Werk) 2.0.2 and earlier on Windows allows a remote auth… Axxon One after 2.0.2 Fix from $1,9502025-09-10 CRITICAL 9.8 CVE-2025-10220 Use of Unmaintained Third Party Components (CWE-1104) in the NuGet dependency components in AxxonSoft Axxon One VMS 2.0.0 through 2.0.4 on Windows al… Axxon One after 2.0.4 Fix from $2,3002025-09-10 MEDIUM 5.5 CVE-2025-10221 Insertion of Sensitive Information into Log File (CWE-532) in the ARP Agent component in AxxonSoft Axxon One / AxxonNet / C-WerkNet 2.0.4 and earlier… Axxon One after 2.0.4 Fix from $1,6002025-09-10 HIGH 7.5 CVE-2018-7467EPSS 10% AxxonSoft Axxon Next has Directory Traversal via an initial /css//..%2f substring in a URI. Next Mitigation only Fix from $1,9502018-02-27