CVE-2025-10227
Medium
Description
Missing Encryption of Sensitive Data (CWE-311) in the Object Archive component in AxxonSoft Axxon One (C-Werk) before 2.0.8 on Windows and Linux allows a local attacker with access to exported storage or stolen physical drives to extract sensitive archive data in plaintext via lack of encryption at rest.
SeverityMedium
CVSS4.6
Exploit probability—
ProductAxxonsoft Axxon One
PublishedSep 10, 2025
First seenSep 10, 2025
Weakness typeCWE-311CWE-311
How to fix
Update
- axxonsoft axxon_one2.0.8 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| axxonsoft axxon_one | v < 2.0.8 | 2.0.8 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.