AxxonSoft

AxxonSoft Limited

CVEs, 365 days09 all time, 1 rejected
Quality-median 99%
CVSS by the CNA-share of records
CWE-share of records
Affected versions-not n/a or unspecified
CVSS added by CISA-lower is better
OrganisationAxxonSoft Limited
RoleCNA
TypeVendor, Hosted Service
Reports tomitre
ScopeAxxonSoft products and solutions, Abetechs GmbH products and solutions (GRUNDIG security products, and C-WERK software solutions).
Advisorieshttps://www.axxonsoft.com/legal/axxonsoft-vulnerability-disclosure-policy/security-advisories
  • CVE-2025-10227 2025-09-10 · CVSS 4.6
    Missing Encryption of Sensitive Data (CWE-311) in the Object Archive component in AxxonSoft Axxon One (C-Werk) before 2.0.8 on Windows and Linux allows a local
  • CVE-2025-10226 2025-09-10 · CVSS 9.8
    Dependency on Vulnerable Third-Party Component (CWE-1395) in the PostgreSQL backend in AxxonSoft Axxon One (C-Werk) 2.0.8 and earlier on Windows and Linux allow
  • CVE-2025-10225 2025-09-10 · CVSS 7.5
    Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119) in the OpenSSL-based session module in AxxonSoft Axxon One (C-Werk) 2.0.6 and
  • CVE-2025-10224 2025-09-10 · CVSS 5.4
    Improper Authentication (CWE-287) in the LDAP authentication engine in AxxonSoft Axxon One (C-Werk) 2.0.2 and earlier on Windows allows a remote authenticated u
  • CVE-2025-10223 2025-09-10 · CVSS 5.4
    Insufficient Session Expiration (CWE-613) in the Web Admin Panel in AxxonSoft Axxon One (C-Werk) prior to 2.0.3 on Windows allows a local or remote authenticate
  • CVE-2025-10222 2025-09-10 · CVSS 3.3
    Exposure of Sensitive Information to an Unauthorized Actor (CWE-200) in the diagnostic dump component in AxxonSoft Axxon One VMS (C-Werk) 2.0.0 through 2.0.1 on
  • CVE-2025-10221 2025-09-10 · CVSS 5.5
    Insertion of Sensitive Information into Log File (CWE-532) in the ARP Agent component in AxxonSoft Axxon One / AxxonNet / C-WerkNet 2.0.4 and earlier on Windows
  • CVE-2025-10220 2025-09-10 · CVSS 9.8
    Use of Unmaintained Third Party Components (CWE-1104) in the NuGet dependency components in AxxonSoft Axxon One VMS 2.0.0 through 2.0.4 on Windows allows a remo

All CVE Program partners