Altn

Records25All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Altn records in CISA KEV

No Altn vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mdaemon 11 records MEDIUM Security Gateway For Email Servers 8 records MEDIUM Mdaemon Webmail 3 records MEDIUM Mdaemon Email Server 2 records LOW Securitygateway 1 record MEDIUM

Records

25 records

TI-2022-09043 CVE-2022-25356 · GHSA-hp7c-9qj5-xcrq

Alt-N MDaemon Security Gateway through 8.5.0 allows SecurityGateway.dll?view=login XML Injection.

MEDIUM 63

Alt-N MDaemon Security Gateway through 8.5.0 allows SecurityGateway.dll?view=login XML Injection.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.05722 Published 2022-04-05 No fix listed CWE-91

TI-2008-01307 CVE-2008-1358 · GHSA-gr8m-vjvh-3ww2

Stack-based buffer overflow in the IMAP server in Alt-N Technologies MDaemon 9.6.4 allows…

MEDIUM 62

Stack-based buffer overflow in the IMAP server in Alt-N Technologies MDaemon 9.6.4 allows remote authenticated users to execute arbitrary code via a FETCH command with a long BODY.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.57075 Published 2008-03-17 No fix listed CWE-119

TI-2022-17359 CVE-2022-37242 · GHSA-j2mh-jvr9-rrcm

MDaemon Technologies SecurityGateway for Email Servers 8.5.2, is vulnerable to HTTP…

MEDIUM 45

MDaemon Technologies SecurityGateway for Email Servers 8.5.2, is vulnerable to HTTP Response splitting via the data parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01424 Published 2022-08-25 No fix listed CWE-74

TI-2022-17357 CVE-2022-37240 · GHSA-wggx-5j3m-2vp5

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to HTTP…

MEDIUM 45

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to HTTP Response splitting via the format parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01424 Published 2022-08-25 No fix listed CWE-74

TI-2008-02521 CVE-2008-2631 · GHSA-7w8f-xwjh-jcgp

The WordClient interface in Alt-N Technologies MDaemon 9.6.5 allows remote attackers to…

MEDIUM 43

The WordClient interface in Alt-N Technologies MDaemon 9.6.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted HTTP POST request.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.2279 Published 2008-06-10 No fix listed CWE-399

TI-2021-08729 CVE-2021-27182 · GHSA-xqqm-w483-3fhq

An issue was discovered in MDaemon before 20.0.4.

MEDIUM 41

An issue was discovered in MDaemon before 20.0.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01554 Published 2021-04-14 No fix listed CWE-74

TI-2018-12664 CVE-2018-17792 · GHSA-3h77-gcgx-h68h

MDaemon Webmail (formerly WorldClient) has CSRF.

MEDIUM 40

MDaemon Webmail (formerly WorldClient) has CSRF.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01039 Published 2019-07-19 No fix listed CWE-352

TI-2021-08728 CVE-2021-27181 · GHSA-67cc-qhr2-wwqr

An issue was discovered in MDaemon before 20.0.4.

LOW 39

An issue was discovered in MDaemon before 20.0.4.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0065 Published 2021-04-14 No fix listed CWE-352

TI-2021-08730 CVE-2021-27183 · GHSA-vj3m-vm3j-x4j5

An issue was discovered in MDaemon before 20.0.4.

LOW 37

An issue was discovered in MDaemon before 20.0.4.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02695 Published 2021-04-14 No fix listed CWE-610

TI-2019-10228 CVE-2019-13612 · GHSA-gj3m-6662-4v94

MDaemon Email Server 19 through 20.0.1 skips SpamAssassin checks by default for e-mail…

LOW 36

MDaemon Email Server 19 through 20.0.1 skips SpamAssassin checks by default for e-mail messages larger than 2 MB (and limits checks to 10 MB even with special configuration), which is arguably inconsistent with currently…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01321 Published 2019-07-16 No fix listed CWE-20

TI-2020-13450 CVE-2020-18723 · GHSA-7c3h-wh3g-298c

Stored cross-site scripting (XSS) in file attachment field in MDaemon webmail 19.5.5…

LOW 31

Stored cross-site scripting (XSS) in file attachment field in MDaemon webmail 19.5.5 allows an attacker to execute code on the email recipient side while forwarding an email to perform potentially malicious activities.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.03963 Published 2021-02-03 No fix listed CWE-79

TI-2020-13451 CVE-2020-18724 · GHSA-977w-cv9x-3pr9

Authenticated stored cross-site scripting (XSS) in the contact name field in the…

LOW 30

Authenticated stored cross-site scripting (XSS) in the contact name field in the distribution list of MDaemon webmail 19.5.5 allows an attacker to executes code and perform a XSS attack while opening a contact list.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.03229 Published 2021-02-03 No fix listed CWE-79

TI-2021-08727 CVE-2021-27180 · GHSA-7wfx-rcx6-fp9g

An issue was discovered in MDaemon before 20.0.4.

LOW 29

An issue was discovered in MDaemon before 20.0.4.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00926 Published 2021-04-14 No fix listed CWE-79

TI-2019-06475 CVE-2019-8984 · GHSA-89vw-mgg8-jw84

MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 2 of 2).

LOW 29

MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 2 of 2).

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00793 Published 2019-02-21 No fix listed CWE-79

TI-2019-06474 CVE-2019-8983 · GHSA-jxvw-q9gm-x4x5

MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 1 of 2).

LOW 29

MDaemon Webmail 14.x through 18.x before 18.5.2 has XSS (issue 1 of 2).

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00793 Published 2019-02-21 No fix listed CWE-79

TI-2012-02242 CVE-2012-2584 · GHSA-3c65-jw75-c45f

Multiple cross-site scripting (XSS) vulnerabilities in Alt-N MDaemon Free 12.5.4 allow…

LOW 26

Multiple cross-site scripting (XSS) vulnerabilities in Alt-N MDaemon Free 12.5.4 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) the Cascading Style Sheets (CSS) expressi…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03232 Published 2012-08-12 No fix listed CWE-79

TI-2022-17362 CVE-2022-37245 · GHSA-r6h3-83gr-j9r7

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site…

LOW 25

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the Blacklist endpoint.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00623 Published 2022-08-25 No fix listed CWE-79

TI-2022-17361 CVE-2022-37244 · GHSA-4c36-rwf6-qrpp

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to IFRAME…

LOW 25

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to IFRAME Injectionvia the currentRequest parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00559 Published 2022-08-25 No fix listed CWE-79

TI-2022-17360 CVE-2022-37243 · GHSA-vrvx-6396-rp45

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site…

LOW 25

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the whitelist endpoint.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00623 Published 2022-08-25 No fix listed CWE-79

TI-2022-17358 CVE-2022-37241 · GHSA-qhvq-vhp3-c48f

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site…

LOW 25

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the data_leak_list_ajax endpoint.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00623 Published 2022-08-25 No fix listed CWE-79

TI-2022-17356 CVE-2022-37239 · GHSA-rh9j-f3wp-f999

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site…

LOW 25

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the rulles_list_ajax endpoint.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00623 Published 2022-08-25 No fix listed CWE-79

TI-2022-17355 CVE-2022-37238 · GHSA-2rgh-6pcq-8cq4

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site…

LOW 25

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the currentRequest parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00559 Published 2022-08-25 No fix listed CWE-79

TI-2022-12316 CVE-2022-29976 · GHSA-w6xx-6vmv-w2mv

An Authenticated Reflected Cross-site scripting at BCC Parameter was discovered in MDaemon before 22.0.0 .

LOW 25

An Authenticated Reflected Cross-site scripting at BCC Parameter was discovered in MDaemon before 22.0.0 .

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00493 Published 2022-05-11 No fix listed CWE-79

TI-2022-12315 CVE-2022-29975 · GHSA-8vw5-h2x8-2hgr

An Authenticated Reflected Cross-site scripting at CC Parameter was discovered in MDaemon before 22.0.0 .

LOW 25

An Authenticated Reflected Cross-site scripting at CC Parameter was discovered in MDaemon before 22.0.0 .

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00493 Published 2022-05-11 No fix listed CWE-79

TI-2019-14046 CVE-2019-19497 · GHSA-prgc-j9w5-pjpp

MDaemon Email Server 17.5.1 allows XSS via the filename of an attachment to an email message.

LOW 25

MDaemon Email Server 17.5.1 allows XSS via the filename of an attachment to an email message.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00602 Published 2019-12-17 No fix listed CWE-79

Open these records in search →