Security Advisory

CVE-2025-10223

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-09-10 12:35:32

Last updated 2025-10-08 11:49:37

Assigner AxxonSoft

CVSS score 5.4

State PUBLISHED

Description

Insufficient Session Expiration (CWE-613) in the Web Admin Panel in AxxonSoft Axxon One (C-Werk) prior to 2.0.3 on Windows allows a local or remote authenticated attacker to retain access with removed privileges via continued use of an unexpired session token until natural expiration.

← Browse all CVEs View on cve.org ↗