CVE-2022-23851: Netaxis API Orchestrator

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Netaxis API Orchestrator (APIO) before 0.19.3 allows server side template injection (SSTI).

Affected products

• Netaxis API Orchestrator: before 0.19.3 (fixed in 0.19.3)

Published 2025-12-17. Last modified 2026-06-17.