Vulnerabilities

TI-2025-03474 CVE-2025-3929 · GHSA-jgvv-fw39-8435

Stored XSS vulnerability in MDaemon Email Server

LOW 25

An XSS issue was discovered in MDaemon Email Server version 25.0.1 and below.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00647 Published 2025-04-29 Fixed in 25.0.2 CWE-79

TI-2024-10357 CVE-2024-11182 · GHSA-q3fg-4x56-mx94

HIGH 83KEV

An XSS issue was discovered in MDaemon Email Server before version 24.5.1c.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.33259 Published 2024-11-15 Fixed in 24.5.1 CWE-79

TI-2023-28679 CVE-2023-52269 · GHSA-w5v2-cgrj-hcpq

LOW 22

MDaemon SecurityGateway through 9.0.3 allows XSS via a crafted Message Content Filtering rule.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00363 Published 2023-12-31 No fix listed CWE-79

TI-2002-01658 CVE-2002-1739 · GHSA-wp37-jvqq-rrmf

LOW 24

Alt-N Technologies Mdaemon 5.0 through 5.0.6 uses a weak encryption algorithm to store user passwords, which allows local users to crack passwords.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00159 Published 2005-06-21 No fix listed CWE-326