{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-19T19:52:09.657","vulnerabilities":[{"cve":{"id":"CVE-2025-13064","sourceIdentifier":"product-security@axis.com","published":"2026-02-10T06:15:54.170","lastModified":"2026-02-17T15:10:00.157","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A server-side injection was possible for a malicious admin to manipulate the application to include a malicious script which is executed by the server. This attack is only possible if the admin uses a client that have been tampered with."},{"lang":"es","value":"Una inyección del lado del servidor fue posible para que un administrador malicioso manipulara la aplicación para incluir un script malicioso que es ejecutado por el servidor. Este ataque solo es posible si el administrador usa un cliente que ha sido manipulado."}],"metrics":{"cvssMetricV31":[{"source":"product-security@axis.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","baseScore":4.5,"baseSeverity":"MEDIUM","attackVector":"ADJACENT_NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":0.9,"impactScore":3.6}]},"weaknesses":[{"source":"product-security@axis.com","type":"Secondary","description":[{"lang":"en","value":"CWE-248"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:axis:camera_station_pro:*:*:*:*:*:*:*:*","versionEndExcluding":"6.14.10768","matchCriteriaId":"F257DBF0-2884-4BC6-9C49-5BDD1F0824EA"}]}]}],"references":[{"url":"https://www.axis.com/dam/public/a9/9e/94/cve-2025-13064pdf-en-US-519290.pdf","source":"product-security@axis.com","tags":["Vendor Advisory"]}]}}]}