CVE-2018-7467 describes a Directory Traversal vulnerability in AxxonSoft Axxon Next, allowing an unauthenticated attacker to access arbitrary files on the server through a specially crafted URI. This high-severity vulnerability (CVSS 7.5) requires no user interaction and could lead to complete confidentiality compromise (C:H). While not listed on CISA's KEV catalog, Nuclei templates exist for exploitation, and its EPSS score indicates a higher than average likelihood of exploitation. There is currently no evidence of active exploitation or significant community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:axxonsoft:next:-:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.