Advisories · Technology
AxxonSoft AxxonOne C-Werk.
Every CVE that names AxxonSoft AxxonOne C-Werk among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.1 Medium
Lack of Encryption in Object Archive in AxxonSoft Axxon One (C-Werk) before 2.0.8
- AxxonSoft AxxonOne C-Werk
- Weak cryptography or TLS
- CVSS 9.3 CriticalCritical · CVSS 9+
PostgreSQL Upgrade from v10 to v17.4 in AxxonSoft Axxon One (C-Werk) 2.0.8 and earlier to Address Multiple Vulnerabilities
- AxxonSoft AxxonOne C-Werk
- CWE-1395
- CVSS 8.7 High
Incorrect Memory Allocation in OpenSSL-Based Session Module in AxxonSoft Axxon One (C-Werk)
- AxxonSoft AxxonOne C-Werk
- Memory corruption
- CVSS 5.3 Medium
Incorrect Evaluation of LDAP Nested Groups during Login in AxxonSoft Axxon One (C-Werk)
- AxxonSoft AxxonOne C-Werk
- Authentication bypass
- CVSS 5.3 Medium
Improper Session Cleanup on Role Removal in Web Admin Panel in AxxonSoft Axxon One (C-Werk)
- AxxonSoft AxxonOne C-Werk
- Authentication bypass
- CVSS 4.8 Medium
Sensitive Information Disclosure in Diagnostic Dumps in AxxonSoft Axxon One VMS
- AxxonSoft AxxonOne C-Werk
- Information disclosure
- CVSS 9.3 CriticalCritical · CVSS 9+
Outdated Third-Party NuGet Packages in AxxonSoft Axxon One VMS 2.0.0 through 2.0.4
- AxxonSoft AxxonOne C-Werk
- CWE-1104