Approved changes feed: RSS · Atom
cpe:2.3:a:axxonsoft:axxon_one:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Axxonsoft (61c786af-3e15-5164-92db-a6f38724f967) |
|---|---|
| Product | Axxon One (8b158888-c40f-51e1-bb41-6186152e13f4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-10227 |
vulnerable | 2026-06-08 07:02:26.470990 |
Lack of Encryption in Object Archive in AxxonSoft Axxon One (C-Werk) before 2.0.8
MEDIUM (4.6)
Missing Encryption of Sensitive Data (CWE-311) in the Object Archive component in AxxonSoft Axxon One (C-Werk) before 2.0.8 on Windows and Linux allows a local attacker with access to exported storage or stolen physical drives to extract sensitive archive data in plaintext via lack of encryption at rest.
Published: 2025-09-10T12:39:12.391Z
Updated: 2025-10-08T11:57:58.014Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10226 |
vulnerable | 2026-06-08 07:02:26.470367 |
PostgreSQL Upgrade from v10 to v17.4 in AxxonSoft Axxon One (C-Werk) 2.0.8 and earlier to Address Multiple Vulnerabilities
CRITICAL (9.8)
Dependency on Vulnerable Third-Party Component (CWE-1395) in the PostgreSQL backend in AxxonSoft Axxon One (C-Werk) 2.0.8 and earlier on Windows and Linux allows a remote attacker to escalate privileges, execute arbitrary code, or cause denial-of-service via exploitation of multiple known CVEs present in PostgreSQL v10.x, which are resolved in PostgreSQL 17.4.
Published: 2025-09-10T12:38:42.549Z
Updated: 2025-10-08T11:56:42.741Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10222 |
vulnerable | 2026-06-08 07:02:26.468500 |
Sensitive Information Disclosure in Diagnostic Dumps in AxxonSoft Axxon One VMS
LOW (3.3)
Exposure of Sensitive Information to an Unauthorized Actor (CWE-200) in the diagnostic dump component in AxxonSoft Axxon One VMS (C-Werk) 2.0.0 through 2.0.1 on Windows allows a local attacker to obtain licensing-related information such as timestamps, license states, and registry values via reading diagnostic export files created by the built-in troubleshooting tool.
Published: 2025-09-10T12:34:50.665Z
Updated: 2025-10-08T11:46:46.982Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.