AI-generated from public sourcesThe starting point for every profile: auto-generated by 0-Doubt from public vendor materials, and not yet confirmed by the vendor or an independent analyst. Nothing here is hidden or overstated — it simply has not been reviewed yet.Where every profile starts, before the vendor or an analyst has reviewed it. A higher label means a more independent source — not a better product.How trust works →Secure coding rating: 0/100How this score is computedA product with no known CVEs starts at a neutral score and climbs the longer it goes without one; a product with known CVEs is penalized by severity instead. This one has 7 known CVEs (vendor-level match — see the CVE list below) and is tracked as ~51 days old in our catalog (a stand-in for real release date, which we don't track). The platform admin controls the formula's weights.
Axway, founded in 2001, is a mid-sized US company whose AMPLIFY platform handles cloud-based data integration alongside identity, data-security, and risk-management capabilities.
Known CVEs (7)About this listSourced from the public NVD database, matched by vendor name. Shown here at the vendor level — we don't track per-product/version data, so a listed CVE may affect a different product from this vendor, not necessarily this one. “New” means published within the last 30 days. “Actively exploited” means CISA's Known Exploited Vulnerabilities (KEV) catalog confirms real-world exploitation, not just a theoretical severity score. An “EPSS” chip appears at 10% and above: that is FIRST's estimated chance of exploitation in the next 30 days, which measures likelihood rather than impact and so can differ sharply from the severity beside it.
A Server-Side Template Injection (SSTI) vulnerability was identified
in the mail template functionality of the Axway SecureTransport product in version 5.5-20260326. This
flaw
allows an attacker wi…
Axway SecureTransport 5.x through 5.3 (or 5.x through 5.5 with certain API configuration) is vulnerable to unauthenticated blind XML injection (and XXE) in the resetPassword functionality via the REST…
Axway provides enterprise integration software — API management, managed file transfer and B2B/EDI integration — for organisations in more than 100 countries. The platform helps organizations govern APIs at scale, move data securely and reliably at enterprise scale, and connect systems, data, and partners across cloud and on-premises environments. It is built for regulated industries such as financial services, healthcare, and government, supporting security, compliance, and data governance demands.
Strengths
Provides enterprise integration software including API management, managed file transfer, and B2B/EDI integration
Connects systems, data, and partners across cloud and on-premises environments
Supports security, compliance, and data governance demands of regulated industries
Enables secure data exchange with customers, suppliers, and partners
Recognized as a leader in API Management by Gartner, Forrester, and IDC
Serves organisations in more than 100 countries
News about Axway (6)Where this comes fromItems from Axway's own public feeds — changelog, blog, GitHub releases or status page — that name Axway in the headline or summary. News from Axway that does not name this product is on the vendor's page instead. Each headline links to the original source; nothing here is written by 0-Doubt.
