PatchTheCVEaxxon one vulnerabilities and fixes
Recent CVEs affecting axxon one, with upgrade or downgrade steps. 8 tracked.
Also searched as: axxonone.
axxon one has 8 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 8. Most recent: 2025-09-10. Highest priority: CVE-2025-10220 (score 53/100).
- CVE-2025-10220 CRITICAL 9.8 UPGRADE Use of Unmaintained Third Party Components (CWE-1104) in the NuGet dependency components in AxxonSoft Axxon On
- CVE-2025-10225 HIGH 7.5 UPGRADE Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119) in the OpenSSL-based session
- CVE-2025-10223 MEDIUM 5.4 UPGRADE Insufficient Session Expiration (CWE-613) in the Web Admin Panel in AxxonSoft Axxon One (C-Werk) prior to 2.0.
- CVE-2025-10221 MEDIUM 5.5 UPGRADE Insertion of Sensitive Information into Log File (CWE-532) in the ARP Agent component in AxxonSoft Axxon One /
- CVE-2025-10227 MEDIUM 4.6 UPGRADE Missing Encryption of Sensitive Data (CWE-311) in the Object Archive component in AxxonSoft Axxon One (C-Werk)
- CVE-2025-10222 LOW 3.3 UPGRADE Exposure of Sensitive Information to an Unauthorized Actor (CWE-200) in the diagnostic dump component in Axxon
- CVE-2025-10226 CRITICAL 9.8 UPGRADE Dependency on Vulnerable Third-Party Component (CWE-1395) in the PostgreSQL backend in AxxonSoft Axxon One (C-
- CVE-2025-10224 MEDIUM 5.4 UPGRADE Improper Authentication (CWE-287) in the LDAP authentication engine in AxxonSoft Axxon One (C-Werk) 2.0.2 and
FAQ
How do I fix axxon one vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is axxon one being exploited right now?
None of the tracked axxon one CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which axxon one CVE should I patch first?
CVE-2025-10220 currently ranks highest (53/100): Use of Unmaintained Third Party Components (CWE-1104) in the NuGet dependency components in AxxonSoft Axxon On.