Axis Communications AB vulnerabilities
Every vulnerability this feed holds for Axis Communications AB, merged from five public registers and ordered by what warrants attention first — exploited in the wild, then CVSS, then recency.
10 vulnerabilities tracked. 1 with public exploit code.
- 8.8 A vulnerability that could allow an attacker to gain unauthorized access.
- 8.8 A vulnerability to perform a privilege escalation attack on the server as a non-admin user.
- 8.3 A WebSocket request sent to a specific API endpoint allows unauthorized access to a separate API endpoint.
- 7.1 Database backups are vulnerable to offline attacks.
- 6.7 The VAPIX SIP configuration API lacked sufficient input validation, which could potentially lead to privilege escalation.
- 6.7 A locally authenticated user can achieve privilege escalation via an insecure configuration that leads to unauthorized code execution.
- 6.5 Improper shell quote escaping when processing user-controlled input, potentially allowing command injection, which could lead to privilege…
- 5.3 The Signed Video Framework contained a out-of-bounds read issue in the Signed Video Framework which could lead the application using this…
- 4.3 The VAPIX API dynamicoverlay.cgi which results in a Denial-of-Service of the overlay functionality.
- 3.9 The VAPIX Edge storage API, enabling the escalation of user privileges by circumventing filesystem isolation, granting unauthorized access…
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that Axis Communications AB is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other vendors tracked here
Red Hat Linux IBM Microsoft Apple Apache Software Foundation Google n/a Oracle Corporation zephyrproject Unknown FFMPEG JetBrains OpenEMR Drupal SAP_SE Cisco go-vikunja Eclipse Foundation hickory-dns n8n-io Hitachi Samsung Semiconductor Tanium