Vulnerability Details CVE-2025-13064
A server-side injection was possible for a malicious admin to manipulate the application to include a malicious script which is executed by the server. This attack is only possible if the admin uses a client that have been tampered with.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 0.4%
CVSS Severity
CVSS v3 Score 4.5
Products affected by CVE-2025-13064
-
cpe:2.3:a:axis:camera_station_pro:6.0.25729
-
cpe:2.3:a:axis:camera_station_pro:6.1.26193
-
cpe:2.3:a:axis:camera_station_pro:6.1.26726
-
cpe:2.3:a:axis:camera_station_pro:6.10.49500
-
cpe:2.3:a:axis:camera_station_pro:6.10.50632
-
cpe:2.3:a:axis:camera_station_pro:6.11.51119
-
cpe:2.3:a:axis:camera_station_pro:6.11.51323
-
cpe:2.3:a:axis:camera_station_pro:6.11.51766
-
cpe:2.3:a:axis:camera_station_pro:6.11.52226
-
cpe:2.3:a:axis:camera_station_pro:6.12.53369
-
cpe:2.3:a:axis:camera_station_pro:6.12.54384
-
cpe:2.3:a:axis:camera_station_pro:6.12.55645
-
cpe:2.3:a:axis:camera_station_pro:6.13.55835
-
cpe:2.3:a:axis:camera_station_pro:6.13.57055
-
cpe:2.3:a:axis:camera_station_pro:6.2.2667
-
cpe:2.3:a:axis:camera_station_pro:6.2.29989
-
cpe:2.3:a:axis:camera_station_pro:6.3.31539
-
cpe:2.3:a:axis:camera_station_pro:6.4.35340
-
cpe:2.3:a:axis:camera_station_pro:6.5.35848
-
cpe:2.3:a:axis:camera_station_pro:6.5.37447
-
cpe:2.3:a:axis:camera_station_pro:6.6.38588
-
cpe:2.3:a:axis:camera_station_pro:6.7.40268
-
cpe:2.3:a:axis:camera_station_pro:6.7.41285
-
cpe:2.3:a:axis:camera_station_pro:6.8.43213
-
cpe:2.3:a:axis:camera_station_pro:6.8.43790
-
cpe:2.3:a:axis:camera_station_pro:6.8.44409
-
cpe:2.3:a:axis:camera_station_pro:6.8.45316
-
cpe:2.3:a:axis:camera_station_pro:6.9.47069
-
cpe:2.3:a:axis:camera_station_pro:6.9.47767