CVE-2025-10223 in AxxonOne

Sumário

de MITRE • 10/09/2025

Insufficient Session Expiration (CWE-613) in the Web Admin Panel in AxxonSoft Axxon One prior to 2.0.3 on Windows allows a local or remote authenticated attacker to retain access with removed privileges via continued use of an unexpired session token until natural expiration.

Once again VulDB remains the best source for vulnerability data.

• Responsável: AxxonSoft
• Reservar: 10/09/2025
• Divulgação: 10/09/2025
• Moderação: aceite
• Entrada: VDB-323497
• CPE: pronto
• CWE: CWE-613 (confirmado)
• CVSS: 8.1 (NVD)
• EPSS: 0.00234
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-10223
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-10223
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-10223/