Server-Side Injection Vulnerability in Axis Communications Products

CVE-2025-13064

What is CVE-2025-13064?

A server-side injection vulnerability exists in Axis Communications products that allows a malicious admin to exploit a vulnerable application. This attack involves the manipulation of the application to load and execute a harmful script on the server. The exploitation is contingent upon the admin using a compromised client that has been tampered with, making it crucial for administrators to ensure the integrity of their systems to prevent such vulnerabilities from being targeted.

References