← Database

CVE-2025-10223

MEDIUM CVSS: 5.4 Published: 2025-09-10 Modified: 2026-06-17

Description

Insufficient Session Expiration (CWE-613) in the Web Admin Panel in AxxonSoft Axxon One (C-Werk) prior to 2.0.3 on Windows allows a local or remote authenticated attacker to retain access with removed privileges via continued use of an unexpired session token until natural expiration.

Affected Platforms

Axxonsoft Axxon One

Weakness Type

CWE-613

References