Skip to content
OpenAdvisories

Vendor

AxxonSoft

13 known vulnerabilities.

2 results · Clear filters · Feed

  • High 8.1

    Default Administrator Password Change Not Enforced in Axxon One Web Client

    Use of Default Password (CWE-1393) in the web client in AxxonSoft Axxon One before 3.0.0 on Windows and Linux allows a remote unauthenticated attacker to log in as the built-in administrator with the default credentials on a newly installed system, because th…

  • High 7.5

    Incorrect Memory Allocation in OpenSSL-Based Session Module in AxxonSoft Axxon One (C-Werk)

    Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119) in the OpenSSL-based session module in AxxonSoft Axxon One (C-Werk) 2.0.6 and earlier on Windows allows a remote attacker under high load conditions to cause application crashes…