Records25All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
Altn records in CISA KEVNo Altn vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
8 records in Security Gateway For Email Servers · all components
Priority MEDIUM 45
MDaemon Technologies SecurityGateway for Email Servers 8.5.2, is vulnerable to HTTP Response splitting via the data parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01424 · Published 2022-08-25 · No fix listed CWE-74
Priority MEDIUM 45
MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to HTTP Response splitting via the format parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01424 · Published 2022-08-25 · No fix listed CWE-74
Priority LOW 25
MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the Blacklist endpoint.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00623 · Published 2022-08-25 · No fix listed CWE-79
Priority LOW 25
MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to IFRAME Injectionvia the currentRequest parameter.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00559 · Published 2022-08-25 · No fix listed CWE-79
Priority LOW 25
MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the whitelist endpoint.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00623 · Published 2022-08-25 · No fix listed CWE-79
Priority LOW 25
MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the data_leak_list_ajax endpoint.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00623 · Published 2022-08-25 · No fix listed CWE-79
Priority LOW 25
MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the rulles_list_ajax endpoint.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00623 · Published 2022-08-25 · No fix listed CWE-79
Priority LOW 25
MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the currentRequest parameter.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00559 · Published 2022-08-25 · No fix listed CWE-79
THREATIST.IORead the docs