AxxonSoft vulnerabilities
We track 5 vulnerabilities in AxxonSoft products across 2 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on November 3, 2026.
Latest AxxonSoft vulnerabilities
- 8.1 High severity
Axxon One: Use of Default Password
Use of Default Password (CWE-1393) in the web client in AxxonSoft Axxon One before 3.0.0 on Windows and Linux allows a remote unauthenticated attacker to log in as the built-in administrator with the default credentials on a newly installed system, because the
- 7.5 High severity
AxxonOne C-Werk: Improper Restriction of Operations within the Bounds of a Memory Buffer
Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119) in the OpenSSL-based session module in AxxonSoft Axxon One (C-Werk) 2.0.6 and earlier on Windows allows a remote attacker under high load conditions to cause application crashes
- 7.1 High severity
AxxonOne C-Werk: Improper Authentication
Improper Authentication (CWE-287) in the LDAP authentication engine in AxxonSoft Axxon One (C-Werk) 2.0.2 and earlier on Windows allows a remote authenticated user to be denied access or misassigned roles via incorrect evaluation of nested LDAP group membershi
- 8.1 High severity
Insufficient Session Expiration (CWE-613) in the Web Admin Panel in AxxonSoft Axxon One…
Insufficient Session Expiration (CWE-613) in the Web Admin Panel in AxxonSoft Axxon One (C-Werk) prior to 2.0.3 on Windows allows a local or remote authenticated attacker to retain access with removed privileges via continued use of an unexpired session token
- 9.8 Critical severity
AxxonOne C-Werk: Use of Unmaintained Third Party Components
Use of Unmaintained Third Party Components (CWE-1104) in the NuGet dependency components in AxxonSoft Axxon One VMS 2.0.0 through 2.0.4 on Windows allows a remote attacker to execute arbitrary code or bypass security features via exploitation of vulnerable thi