CVE-2025-13064

4.5 mediumEPSS 0.2%

Medium (4.5) in axis camera station pro. EPSS 0.2% chance of exploitation in the next 30 days.

A server-side injection was possible for a malicious admin to manipulate the application to include a malicious script which is executed by the server. This attack is only possible if the admin uses a client that have been tampered with.

Severity

CVSS 3.1

4.5 medium

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 15% of CVEs (scores of 2026-10-31)
CWE: CWE-248
Published: 2026-02-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

axis:camera_station_pro

References

https://www.axis.com/dam/public/a9/9e/94/cve-2025-13064pdf-en-US-519290.pdf

Check your stack JSON