axis axis os

Name: axis axis os
Brand: axis

productUS

cpe:2.3:o:axis:axis_os:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical15high11medium1low

updated 2026-10-22

vulnerabilities (36)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-11142US	high8.8	0.56% (46th)	Exploit	12.7.36	2026-02-10	12.6.54 → 12.7.36
CVE-2025-0324US	high8.8	0.41% (34th)	Exploit	12.3.33	2025-06-02	12.0.0 → 12.3.33
CVE-2023-21413US	high7.2	1.47% (73rd)	—	10.12.199	2023-10-16	2 versions
CVE-2025-6779US	—	1.05% (64th)	—	12.6.40	2025-11-11	12.0.0 → 12.6.40
CVE-2021-31988US	high8.8	0.95% (61st)	—	10.7	2021-10-05	< 10.7
CVE-2021-31987US	high7.5	0.89% (59th)	—	10.8	2021-10-05	< 10.8
CVE-2021-31986US	medium6.8	0.80% (56th)	—	10.7	2021-10-05	< 10.7
CVE-2023-21415US	high8.1	0.71% (53rd)	—	11.6.94	2023-10-16	2 versions
CVE-2023-5800US	high8.8	0.68% (52nd)	—	11.8.61	2024-02-05	< 11.8.61
CVE-2023-21418US	high7.1	0.67% (51st)	—	6.50.5.15	2023-11-21	2 versions
CVE-2023-21417US	high7.1	0.67% (51st)	—	11.7.57	2023-11-21	< 11.7.57
CVE-2023-21416US	medium6.5	0.67% (51st)	—	11.7.57	2023-11-21	< 11.7.57
CVE-2024-8160US	low2.7	0.64% (50th)	—	12.1.21	2024-11-26	10.9.0 → 12.1.21
CVE-2024-0055US	—	0.60% (48th)	—	11.9.53	2024-03-19	10.12.0 → 11.9.53
CVE-2024-47259US	high7.1	0.53% (44th)	—	12.2.52	2025-03-04	11.11.0 → 12.2.52
CVE-2026-0802US	high7.3	0.40% (33rd)	—	12.9.33	2026-05-12	12.0.0 → 12.9.33
CVE-2025-5718US	—	0.38% (31st)	—	12.6.30	2025-11-11	12.0.0 → 12.6.30
CVE-2024-47261US	medium4.3	0.38% (31st)	—	12.3.56	2025-04-08	10.12.0 → 12.3.56
CVE-2023-5553US	medium6.8OT elevated	0.33% (25th)	—	11.7.57	2023-11-21	10.8 → 11.7.57
CVE-2025-0361US	medium5.3	0.33% (25th)	—	12.3.56	2025-04-08	11.11.0 → 12.3.56
CVE-2025-5452US	medium6.6	0.31% (23rd)	—	12.6.69	2025-11-11	12.0.0 → 12.6.69
CVE-2023-21405US	medium6.5	0.30% (21st)	—	no fix	2023-07-25	2 versions
CVE-2023-21404US	medium5.3OT elevated	0.28% (20th)	—	11.4.52	2023-05-08	11.0.89 → 11.4.52
CVE-2023-21414US	medium6.8	0.26% (17th)	—	10.12.206	2023-10-16	3 versions
CVE-2025-0358US	high8.8	0.25% (15th)	—	12.4.0	2025-06-02	12.0.0 → 12.4.0
CVE-2026-1185US	high8.8	0.23% (13th)	—	12.10.37	2026-05-12	12.0.0 → 12.10.37
CVE-2025-5454US	medium6.7	0.16% (5th)	—	12.6.18	2025-11-11	12.0.0 → 12.6.18
CVE-2025-4645US	—	0.16% (5th)	—	12.6.7	2025-11-11	12.0.0 → 12.6.7
CVE-2025-30027US	—	0.16% (5th)	—	12.5.36	2025-08-12	12.0.0 → 12.5.36
CVE-2025-6298US	—	0.15% (3rd)	—	12.6.28	2025-11-11	< 12.6.28
CVE-2025-3892US	—	0.15% (3rd)	—	12.5.31	2025-08-12	12.0.0 → 12.5.31
CVE-2025-0360US	—OT elevated	0.14% (3rd)	—	12.2.41	2025-03-04	11.11.0 → 12.2.41
CVE-2025-0359US	medium5.5OT elevated	0.14% (3rd)	—	12.2.52	2025-03-04	11.11.0 → 12.2.52
CVE-2025-8108US	—	0.14% (3rd)	—	12.7.33	2025-11-11	12.0.0 → 12.7.33
CVE-2026-0804US	high7.3	0.13% (2nd)	—	12.10.4	2026-05-12	12.0.0 → 12.10.4
CVE-2026-0541US	high7.3	0.10% (1st)	—	12.9.32	2026-05-12	12.0.0 → 12.9.32

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-35Path Traversal: '.../...//'7 CVEs
CWE-1287Improper Validation of Specified Type of Input6 CVEs
CWE-1286Improper Validation of Syntactic Correctness of Input4 CVEs
CWE-732Incorrect Permission Assignment for Critical Resource4 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-863Incorrect Authorization3 CVEs
CWE-404Improper Resource Shutdown or Release2 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE36 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan