What’s Vulnerable › Products

AxxonSoft AxxonOne C-Werk vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your AxxonSoft AxxonOne C-Werk version is affected

Latest AxxonSoft AxxonOne C-Werk vulnerabilities

• CVE-2025-10227 — Lack of Encryption in Object Archive in AxxonSoft Axxon One (C-Werk) before 2.0.8 (CVSS 4.6)
• CVE-2025-10226 — PostgreSQL Upgrade from v10 to v17.4 in AxxonSoft Axxon One (C-Werk) 2.0.8 and earlier to Address Multiple Vulnerabilities (CVSS 9.8)
• CVE-2025-10225 — Incorrect Memory Allocation in OpenSSL-Based Session Module in AxxonSoft Axxon One (C-Werk) (CVSS 7.5)
• CVE-2025-10224 — Incorrect Evaluation of LDAP Nested Groups during Login in AxxonSoft Axxon One (C-Werk) (CVSS 7.1)
• CVE-2025-10223 — Improper Session Cleanup on Role Removal in Web Admin Panel in AxxonSoft Axxon One (C-Werk) (CVSS 8.1)
• CVE-2025-10222 — Sensitive Information Disclosure in Diagnostic Dumps in AxxonSoft Axxon One VMS (CVSS 3.3)
• CVE-2025-10221 — Hardcoded Password Exposure in AxxonNet (C-WerkNet) ARP Agent Logs (CVSS 5.5)
• CVE-2025-10220 — Outdated Third-Party NuGet Packages in AxxonSoft Axxon One VMS 2.0.0 through 2.0.4 (CVSS 9.8)