PT-2025-37046 · Axxonsoft · Axxonone

Published 2025-09-10 · Updated 2025-12-19 · CVE-2025-10227

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: AxxonSoft Axxon One versions prior to 2.0.8

Description: The Object Archive component in AxxonSoft Axxon One lacks encryption of sensitive data at rest. This allows a local attacker with access to exported storage or stolen physical drives to extract sensitive archive data in plaintext.

Recommendations: Update AxxonSoft Axxon One to version 2.0.8 or later.

Fix

Missing Encryption of Sensitive Data

Weakness Enumeration

CWE-311

Related Identifiers

CVE-2025-10227

Affected Products

Axxonone

References · 9

• https://osv.dev/vulnerability/CVE-2025-10227 · Vendor Advisory
• https://axxonsoft.com/legal/axxonsoft-vulnerability-disclosure-policy/security-advisories · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-10227 · Security Note
• https://twitter.com/CVEnew/status/1965775025954603153 · Twitter Post
• https://twitter.com/grok/status/1965777141582491722 · Twitter Post
• https://t.me/cveNotify/146327 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1965784012674208080 · Twitter Post
• https://twitter.com/ford53196/status/1965776870227714067 · Twitter Post
• https://t.me/cveNotify/137799 · Telegram Post