Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: AxxonSoft Axxon One — axxonsoft.com/legal/axxonsoft-vulnerability-disclosure-poli… Clear all filters
TI-2026-84174 CVE-2026-121022 · GHSA-c35r-j59w-5p7f

Axxon One web client does not enforce default admin password change

Priority MEDIUM 42

Use of Default Password (CWE-1393) in the web client in AxxonSoft Axxon One before 3.0.0 on Windows and Linux allows a remote unauthenticated attacker to log in as the built-in administrator with the default credentials…

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00378 Published 2026-11-03 Fixed in 3.0.0 CWE-1393
TI-2026-84173 CVE-2026-121021 · GHSA-73r7-q94j-p98r

Plaintext storage of LDAP password in Axxon One shared configuration

Priority LOW 29

Plaintext Storage of a Password (CWE-256) in the SecurityManager shared configuration in AxxonSoft Axxon One before 3.1.0 on Windows and Linux allows a local attacker with read access to the configuration directory or to…

CVSS 4.0MEDIUM 6.8 Local Low privileges No interaction EPSS 0.00092 Published 2026-11-03 Fixed in 3.1.0 CWE-256
TI-2026-84172 CVE-2026-121020 · GHSA-j27f-gvg7-cxpv

User and role enumeration in AxxonSoft Axxon One security API

Priority LOW 23

Exposure of Sensitive Information to an Unauthorized Actor (CWE-200) in the security configuration API in AxxonSoft Axxon One before 3.2.0 on Windows and Linux allows a remote authenticated user with limited privileges t…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00215 Published 2026-11-03 Fixed in 3.2.0 CWE-200