Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Axigen Component: Axigen Mobile Webmail Clear all filters
TI-2023-21184 CVE-2023-40355 · GHSA-6cj6-cwf2-xhf2

Cross Site Scripting (XSS) vulnerability in Axigen versions 10.3.3.0 before 10.3.3.59…

Priority LOW 27

Cross Site Scripting (XSS) vulnerability in Axigen versions 10.3.3.0 before 10.3.3.59, 10.4.0 before 10.4.19, and 10.5.0 before 10.5.5, allows authenticated attackers to execute arbitrary code and obtain sensitive inform…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01081 Published 2024-02-07 No fix listed CWE-79
TI-2022-13396 CVE-2022-31470 · GHSA-v4xv-4fh8-cwfr

An XSS vulnerability in the index_mobile_changepass.hsp reset-password section of Axigen…

Priority MEDIUM 59

An XSS vulnerability in the index_mobile_changepass.hsp reset-password section of Axigen Mobile WebMail before 10.2.3.12 and 10.3.x before 10.3.3.47 allows attackers to run arbitrary Javascript code that, using an active…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.52721 Published 2022-06-07 No fix listed CWE-79