Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Altn Component: Mdaemon Webmail Clear all filters
TI-2020-13451 CVE-2020-18724 · GHSA-977w-cv9x-3pr9

Authenticated stored cross-site scripting (XSS) in the contact name field in the…

Priority LOW 30

Authenticated stored cross-site scripting (XSS) in the contact name field in the distribution list of MDaemon webmail 19.5.5 allows an attacker to executes code and perform a XSS attack while opening a contact list.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.03229 Published 2021-02-03 No fix listed CWE-79
TI-2020-13450 CVE-2020-18723 · GHSA-7c3h-wh3g-298c

Stored cross-site scripting (XSS) in file attachment field in MDaemon webmail 19.5.5…

Priority LOW 31

Stored cross-site scripting (XSS) in file attachment field in MDaemon webmail 19.5.5 allows an attacker to execute code on the email recipient side while forwarding an email to perform potentially malicious activities.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.03963 Published 2021-02-03 No fix listed CWE-79