MDaemon

Records4All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

MDaemon records in CISA KEV

Products in the NVD configurations · select one to filter the records

4 records

TI-2024-10357 CVE-2024-11182 · GHSA-q3fg-4x56-mx94

HIGH 83KEV

An XSS issue was discovered in MDaemon Email Server before version 24.5.1c.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.33259 Published 2024-11-15 Fixed in 24.5.1 CWE-79

TI-2025-03474 CVE-2025-3929 · GHSA-jgvv-fw39-8435

LOW 25

An XSS issue was discovered in MDaemon Email Server version 25.0.1 and below.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00647 Published 2025-04-29 Fixed in 25.0.2 CWE-79

TI-2002-01658 CVE-2002-1739 · GHSA-wp37-jvqq-rrmf

LOW 24

Alt-N Technologies Mdaemon 5.0 through 5.0.6 uses a weak encryption algorithm to store user passwords, which allows local users to crack passwords.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00159 Published 2005-06-21 No fix listed CWE-326

TI-2023-28679 CVE-2023-52269 · GHSA-w5v2-cgrj-hcpq

LOW 22

MDaemon SecurityGateway through 9.0.3 allows XSS via a crafted Message Content Filtering rule.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00363 Published 2023-12-31 No fix listed CWE-79