Overview 41 matches · 3 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 4 public PoC · 1 EPSS ≥ 0.5
41matches
3in Waratek scope7.3%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
4public PoC9.8%
1EPSS ≥ 0.52.4%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
3
7.3%
Outside Waratek scope
0
0.0%
Not applicable
38
92.7%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
41
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
4
9.8%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
37
90.2%
split by
peak 17 / year
20031
Not applicable1
Medium1
not blocked1
Working exploit published1
20042
Not applicable2
Medium2
not blocked2
No public exploit2
20050
20060
20075
Not applicable5
Medium5
not blocked5
Working exploit published1
No public exploit4
20080
20090
20100
20110
20121
No exploit published1
Medium1
not blocked1
No public exploit1
20131
Not applicable1
Medium1
not blocked1
Working exploit published1
20141
No exploit published1
Medium1
not blocked1
No public exploit1
20150
20160
20173
Not applicable3
Medium3
not blocked3
Working exploit published1
No public exploit2
20181
No exploit published1
Medium1
not blocked1
No public exploit1
20190
20200
20212
Not applicable2
Medium2
not blocked2
No public exploit2
20220
20233
Not applicable3
Medium3
not blocked3
No public exploit3
20241
Not applicable1
Medium1
not blocked1
No public exploit1
202517
Not applicable17
Medium17
not blocked17
No public exploit17
20263
Not applicable3
Medium3
not blocked3
No public exploit3
200420062008201020122014201620182020202220242026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2025-13064 | Medium | 2026-02-10 | Not applicable | No public exploit | A server-side injection was possible for a malicious admin to manipulate the application to include a malicious script which is executed by the server. This attack is only possible if the admin uses a client that have been tampered with. |
| CVE-2025-12757 | Medium | 2026-02-10 | Not applicable | No public exploit | An AXIS Camera Station Pro feature can be exploited in a way that allows a non-admin user to view information they are not permitted to. |
| CVE-2025-12063 | Medium | 2026-02-10 | Not applicable | No public exploit | An insecure direct object reference allowed a non-admin user to modify or remove certain data objects without having the appropriate permissions. |
| CVE-2025-8108 | Medium | 2025-11-11 | Not applicable | No public exploit | An ACAP configuration file has improper permissions and lacks input validation, which could potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application. |
| CVE-2025-6779 | Medium | 2025-11-11 | Not applicable | No public exploit | An ACAP configuration file has improper permissions, which could allow command injection and potentially lead to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application. |
| CVE-2025-6298 | Medium | 2025-11-11 | Not applicable | No public exploit | ACAP applications can gain elevated privileges due to improper input validation, potentially leading to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application. |
| CVE-2025-5718 | Medium | 2025-11-11 | Not applicable | No public exploit | The ACAP Application framework could allow privilege escalation through a symlink attack. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application. |
| CVE-2025-5454 | Medium | 2025-11-11 | Not applicable | No public exploit | An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application. |
| CVE-2025-5452 | Medium | 2025-11-11 | Not applicable | No public exploit | A malicious ACAP application can gain access to admin-level service account credentials used by legitimate ACAP applications, leading to potential privilege escalation of the malicious ACAP application. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application. |
| CVE-2025-4645 | Medium | 2025-11-11 | Not applicable | No public exploit | An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application. |
| CVE-2025-7622 | Medium | 2025-08-12 | Not applicable | No public exploit | During an internal security assessment, a Server-Side Request Forgery (SSRF) vulnerability that allowed an authenticated attacker to access internal resources on the server was discovered. |
| CVE-2025-3892 | Medium | 2025-08-12 | Not applicable | No public exploit | ACAP applications can be executed with elevated privileges, potentially leading to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application. |
| CVE-2025-30027 | Medium | 2025-08-12 | Not applicable | No public exploit | An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application. |
| CVE-2025-30026 | Medium | 2025-07-11 | Not applicable | No public exploit | The AXIS Camera Station Server had a flaw that allowed to bypass authentication that is normally required. |
| CVE-2025-30025 | Medium | 2025-07-11 | Not applicable | No public exploit | The communication protocol used between the server process and the service control had a flaw that could lead to a local privilege escalation. |
| CVE-2025-30024 | Medium | 2025-07-11 | Not applicable | No public exploit | The communication protocol used between client and server had a flaw that could be leveraged to execute a man in the middle attack. |
| CVE-2025-1056 | Medium | 2025-04-23 | Not applicable | No public exploit | Gee-netics, member of AXIS Camera Station Pro Bug Bounty Program, has identified an issue with a specific file that the server is using. A non-admin user can modify this file to either create files or change the content of files in an admin-protected location. Axis has released a patched version for the highlighted flaw. Please refer to the Axis security advisory for more information and solution. |
| CVE-2025-0361 | Medium | 2025-04-08 | Not applicable | No public exploit | During an annual penetration test conducted on behalf of Axis Communications, Truesec discovered a flaw in the VAPIX Device Configuration framework that allowed for unauthenticated username enumeration through the VAPIX Device Configuration SSH Management API. |
| CVE-2024-47261 | Medium | 2025-04-08 | Not applicable | No public exploit | 51l3nc3, a member of the AXIS OS Bug Bounty Program, has found that the VAPIX API uploadoverlayimage.cgi did not have sufficient input validation to allow an attacker to upload files to block access to create image overlays in the web interface of the Axis device. |
| CVE-2024-7696 | Medium | 2025-01-07 | Not applicable | No public exploit | Seth Fogie, member of AXIS Camera Station Pro Bug Bounty Program, has found that it is possible for an authenticated malicious client to tamper with audit log creation in AXIS Camera Station, or perform a Denial-of-Service attack on the AXIS Camera Station server using maliciously crafted audit log entries. Axis has released a patched version for the highlighted flaw. Please refer to the Axis security advisory for more information and solution. |
| CVE-2024-0055 | Medium | 2024-03-19 | Not applicable | No public exploit | Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX APIs mediaclip.cgi and playclip.cgi was vulnerable for file globbing which could lead to a resource exhaustion attack. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution. |
| CVE-2023-21405 | Medium | 2023-07-25 | Not applicable | No public exploit | Knud from Fraktal.fi has found a flaw in some Axis Network Door Controllers and Axis Network Intercoms when communicating over OSDP, highlighting that the OSDP message parser crashes the pacsiod process, causing a temporary unavailability of the door-controlling functionalities meaning that doors cannot be opened or closed. No sensitive or customer data can be extracted as the Axis device is not further compromised. Please refer to the Axis security advisory for more information, mitigation and affected products and software versions. |
| CVE-2023-21404 | Medium | 2023-05-08 | Not applicable | No public exploit | AXIS OS 11.0.X - 11.3.x use a static RSA key in legacy LUA-components to protect Axis-specific source code. The static RSA key is not used in any other secure communication nor can it be used to compromise the device or any customer data. |
| CVE-2023-22984 | Medium | 2023-02-21 | Not applicable | No public exploit | A Vulnerability was discovered in Axis 207W network camera. There is a reflected XSS vulnerability in the web administration portal, which allows an attacker to execute arbitrary JavaScript via URL. |
| CVE-2021-31986 | Medium | 2021-10-05 | Not applicable | No public exploit | User controlled parameters related to SMTP notifications are not correctly validated. This can lead to a buffer overflow resulting in crashes and data leakage. |
| CVE-2021-31989 | Medium | 2021-08-25 | Not applicable | No public exploit | A user with permission to log on to the machine hosting the AXIS Device Manager client could under certain conditions extract a memory dump from the built-in Windows Task Manager application. The memory dump may potentially contain credentials of connected Axis devices. |
| CVE-2018-8032 | Medium | 2018-08-02 | No exploit published | No public exploit | Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services. |
| CVE-2017-15885 | Medium | 2017-10-25 | Not applicable | No public exploit | Reflected XSS in the web administration portal on the Axis 2100 Network Camera 2.03 allows an attacker to execute arbitrary JavaScript via the conf_Layout_OwnTitle parameter to view/view.shtml. NOTE: this might overlap CVE-2007-5214. |
| CVE-2017-12413 | Medium | 2017-08-04 | Not applicable | No public exploit | AXIS 2100 devices 2.43 have XSS via the URI, possibly related to admin/admin.shtml. |
| CVE-2015-8256 | Medium | 2017-04-17 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in Axis network cameras. |
| CVE-2014-3596 | Medium | 2014-08-27 | No exploit published | No public exploit | The getCN function in Apache Axis 1.4 and earlier does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a certificate with a subject that specifies a common name in a field that is not the CN field. NOTE: this issue exists because of an incomplete fix for CVE-2012-5784. |
| CVE-2011-5261 | Medium | 2013-02-12 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in serverreport.cgi in Axis M10 Series Network Cameras M1054 firmware 5.21 and earlier allows remote attackers to inject arbitrary web script or HTML via the pageTitle parameter to admin/showReport.shtml. |
| CVE-2012-5784 | Medium | 2012-11-04 | No exploit published | No public exploit | Apache Axis 1.4 and earlier, as used in PayPal Payments Pro, PayPal Mass Pay, PayPal Transactional Information SOAP, the Java Message Service implementation in Apache ActiveMQ, and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. |
| CVE-2007-5214 | Medium | 2007-10-04 | Not applicable | No public exploit | Multiple cross-site scripting (XSS) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO to the default URI associated with a directory, as demonstrated by (a) the root directory and (b) the view/ directory; (2) parameters associated with saved settings, as demonstrated by (c) the conf_Network_HostName parameter on the Network page and (d) the conf_Layout_OwnTitle parameter to ServerManager.srv; and (3) the query string to ServerManager.srv, which is displayed on the logs page. NOTE: an attacker can leverage a CSRF vulnerability to modify saved settings. |
| CVE-2007-5212 | Medium | 2007-10-04 | Not applicable | No public exploit | Multiple cross-site scripting (XSS) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware before 2.43 allow remote attackers to inject arbitrary web script or HTML via (1) parameters associated with saved settings, as demonstrated by the conf_SMTP_MailServer1 parameter to ServerManager.srv; or (2) the subpage parameter to wizard/first/wizard_main_first.shtml. NOTE: an attacker can leverage a CSRF vulnerability to modify saved settings. |
| CVE-2007-4930 | Medium | 2007-09-18 | Not applicable | Working exploit published | Multiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 207W camera allow remote attackers to perform certain actions as administrators via (1) axis-cgi/admin/restart.cgi, (2) the user and sgrp parameters to axis-cgi/admin/pwdgrp.cgi in an add action, or (3) the server parameter to admin/restartMessage.shtml. |
| CVE-2007-4929 | Medium | 2007-09-18 | Not applicable | No public exploit | Multiple cross-site scripting (XSS) vulnerabilities in the AXIS 207W camera allow remote attackers to inject arbitrary web script or HTML via the camNo parameter to incl/image_incl.shtml, and other unspecified vectors. |
| CVE-2007-4928 | Medium | 2007-09-18 | Not applicable | No public exploit | The AXIS 207W camera stores a WEP or WPA key in cleartext in the configuration file, which might allow local users to obtain sensitive information. |
| CVE-2004-2426 | Medium | 2004-12-31 | Not applicable | No public exploit | Directory traversal vulnerability in Axis Network Camera 2.40 and earlier, and Video Server 3.12 and earlier, allows remote attackers to bypass authentication via a .. (dot dot) in an HTTP POST request to ServerManager.srv, then use these privileges to conduct other activities, such as modifying files using editcgi.cgi. |
| CVE-2004-0789 | Medium | 2004-12-31 | Not applicable | No public exploit | Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2) Axis Network products before firmware 3.13, and (3) Men & Mice Suite 2.2x before 2.2.3 and 3.5.x before 3.5.2, allow remote attackers to cause a denial of service (CPU and network bandwidth consumption) by triggering a communications loop via (a) DNS query packets with localhost as a spoofed source address, or (b) a response packet that triggers a response packet. |
| CVE-2003-1386 | Medium | 2003-12-31 | Not applicable | Working exploit published | AXIS 2400 Video Server 2.00 through 2.33 allows remote attackers to obtain sensitive information via an HTTP request to /support/messages, which displays the server's /var/log/messages file. |