Insecure Direct Object Reference in Axis Communications Products

CVE-2025-12063

What is CVE-2025-12063?

A vulnerability exists within Axis Communications products that permits a non-admin user to access and manipulate certain data objects without proper authorization. This insecure direct object reference can lead to unauthorized data modifications or deletions, raising significant security concerns for product users. Organizations utilizing affected Axis products should review their permissions and consider applying necessary security updates.

References