CVE-2025-10225 – Incorrect Memory Allocation in OpenSSL-Based Session Module in AxxonSoft Axxon One

CVE ID : CVE-2025-10225

Published : Sept. 10, 2025, 1:15 p.m. | 1 hour, 23 minutes ago

Description : Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119) in the OpenSSL-based session module in AxxonSoft Axxon One 2.0.6 and earlier on Windows allows a remote attacker under high load conditions to cause application crashes or unpredictable behavior via triggering memory reallocation errors when handling expired session keys.

Severity: 8.7 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…