CVE-2026-121020

Exposure of Sensitive Information to an Unauthorized Actor CWE-200 in the security configuration API in AxxonSoft Axxon One before 3.2.0 on Windows and Linux allows a remote authenticated user with limited privileges to enumerate all user accounts and roles configured in the system via the user...

CVE-2026-121020 User and Role Enumeration by Low-Privileged Users in Axxon One Security Configuration API

Exposure of Sensitive Information to an Unauthorized Actor CWE-200 in the security configuration API in AxxonSoft Axxon One before 3.2.0 on Windows and Linux allows a remote authenticated user with limited privileges to enumerate all user accounts and roles configured in the system via the user...

CVE-2026-121020

The AxxonSoft Axxon One software (versions before 3.2.0 on Windows and Linux ) contains a vulnerability in the security configuration API (CWE-200 ). A remote authenticated user with limited privileges can exploit this flaw to enumerate all user accounts and roles configured in the system. This i...

EUVD-2026-115716

Exposure of Sensitive Information to an Unauthorized Actor CWE-200 in the security configuration API in AxxonSoft Axxon One before 3.2.0 on Windows and Linux allows a remote authenticated user with limited privileges to enumerate all user accounts and roles configured in the system via the user...