CVE-2025-10227

概要

参考情報

• axxonsoft.com/legal/axxonsoft-vulnerability-disclosure-policy/security-advisories · Vendor Advisory

axxon one のその他の脆弱性

• CVE-2025-10226緊急 9.8Dependency on Vulnerable Third-Party Component (CWE-1395) in the PostgreSQL backend in AxxonSoft Axxon One (C-Werk) 2.0.8 and earlier on Win…
• CVE-2025-10225高 7.5Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119) in the OpenSSL-based session module in AxxonSoft Axxon One…
• CVE-2025-10224高 7.1Improper Authentication (CWE-287) in the LDAP authentication engine in AxxonSoft Axxon One (C-Werk) 2.0.2 and earlier on Windows allows a re…
• CVE-2025-10223高 8.1Insufficient Session Expiration (CWE-613) in the Web Admin Panel in AxxonSoft Axxon One (C-Werk) prior to 2.0.3 on Windows allows a local or…
• CVE-2025-10222低 3.3Exposure of Sensitive Information to an Unauthorized Actor (CWE-200) in the diagnostic dump component in AxxonSoft Axxon One VMS (C-Werk) 2.…