Vulnerabilities

TI-2022-17355 CVE-2022-37238 · GHSA-2rgh-6pcq-8cq4

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site…

LOW 25

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the currentRequest parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00559 Published 2022-08-25 No fix listed CWE-79

TI-2022-17356 CVE-2022-37239 · GHSA-rh9j-f3wp-f999

LOW 25

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the rulles_list_ajax endpoint.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00623 Published 2022-08-25 No fix listed CWE-79

TI-2022-17357 CVE-2022-37240 · GHSA-wggx-5j3m-2vp5

MEDIUM 45

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to HTTP Response splitting via the format parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01424 Published 2022-08-25 No fix listed CWE-74

TI-2022-17358 CVE-2022-37241 · GHSA-qhvq-vhp3-c48f

LOW 25

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the data_leak_list_ajax endpoint.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00623 Published 2022-08-25 No fix listed CWE-79

TI-2022-17359 CVE-2022-37242 · GHSA-j2mh-jvr9-rrcm

MEDIUM 45

MDaemon Technologies SecurityGateway for Email Servers 8.5.2, is vulnerable to HTTP Response splitting via the data parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01424 Published 2022-08-25 No fix listed CWE-74

TI-2022-17360 CVE-2022-37243 · GHSA-vrvx-6396-rp45

LOW 25

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the whitelist endpoint.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00623 Published 2022-08-25 No fix listed CWE-79

TI-2022-17361 CVE-2022-37244 · GHSA-4c36-rwf6-qrpp

LOW 25

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to IFRAME Injectionvia the currentRequest parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00559 Published 2022-08-25 No fix listed CWE-79

TI-2022-17362 CVE-2022-37245 · GHSA-r6h3-83gr-j9r7

LOW 25

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the Blacklist endpoint.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00623 Published 2022-08-25 No fix listed CWE-79