AM
Product
Axigen Mail Server
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 2Medium 2Low 0
Watch
Add Axigen Mail Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-23566 | 9.8 | Jan 13 | A 2-Step Verification problem in Axigen 10.3.3.52 allows an attacker to access a mailbox by bypassing 2-Step Verification when they try to add an account to any third-party… Affected: 10.3.3.52 |
| CVE-2023-48974 | 9.6 | Feb 8 | Cross Site Scripting vulnerability in Axigen WebMail prior to 10.3.3.61 allows a remote attacker to escalate privileges via a crafted script to the serverName_input parameter Affected: through 10.5.7 |
| CVE-2020-26942 | 9.1 | Mar 21 | An issue discovered in Axigen Mail Server 10.3.x before 10.3.1.27 and 10.3.2.x before 10.3.3.1 allows unauthenticated attackers to submit a setAdminPassword operation request,… Affected: 10.3.0 before 10.3.1.27; 10.3.2.0 before 10.3.3.1 |
| CVE-2025-68723 | 9.0 | Feb 5 | Axigen Mail Server before 10.5.57 contains multiple stored Cross-Site Scripting (XSS) vulnerabilities in the WebAdmin interface Affected: 10.3.0 before 10.5.57; 10.6.0 before 10.6.26 |
| CVE-2025-68722 | 8.8 | Feb 5 | Axigen Mail Server before 10.5.57 and 10.6.x before 10.6.26 contains a Cross-Site Request Forgery (CSRF) vulnerability in the WebAdmin interface through improper handling of the… Affected: 10.3.0 before 10.5.57; 10.6.0 before 10.6.26 |
| CVE-2025-68721 | 8.1 | Feb 5 | Axigen Mail Server before 10.5.57 contains an improper access control vulnerability in the WebAdmin interface Affected: 10.3.0 before 10.5.57; 10.6.0 before 10.6.26 |
| CVE-2025-68643 | 5.4 | Feb 5 | Axigen Mail Server before 10.5.57 allows stored Cross-Site Scripting (XSS) in the handling of the timeFormat account preference parameter Affected: 10.3.0 before 10.5.57; 10.6.0 before 10.6.26 |
| CVE-2015-5379 | 5.4 | Oct 23 | Cross-site scripting (XSS) vulnerability in actions.hsp in the Ajax WebMail interface in AXIGEN Mail Server before 9.0 allows remote attackers to inject arbitrary web script or… Affected: 8.0; 8.0.1; 8.0.2; 8.0.3; 8.1.0; 8.1.1; +3 more |
| CVE-2012-2592 | – | Jun 18 | Cross-site scripting (XSS) vulnerability in Axigen Mail Server 8.0.1 allows remote attackers to inject arbitrary web script or HTML via the body of an email Affected: 8.0.1 |
Showing 9