PT-2024-22489 · Axigen · Axigen Mail Server

Name of the Vulnerable Software and Affected Versions: Axigen Mail Server for Windows versions 10.5.18 and before Description: An issue was discovered in Axigen Mail Server for Windows, allowing local low-privileged attackers to execute arbitrary code and escalate privileges via insecure DLL...

CVE-2024-28589: Incorrect Permission Assignment for Critical Resource

An issue was discovered in Axigen Mail Server for Windows versions 10.5.18 and before, allows local low-privileged attackers to execute arbitrary code and escalate privileges via insecure DLL loading from a world-writable directory during service initialization...

Axigen < 10.5.7 - Persistent Cross-Site Scripting

Exploit Title: Axigen alert1 PoC of the POST request: POST /?h=1bb40e85937506a7186a125bd8c5d7ef&page=glset HTTP/1.1 Host: localhost:9443 Cookie: eula=true;...

CVE-2024-25080

WebMail in Axigen 10.x before 10.3.3.62 allows XSS via the image attachment viewer...

CVE-2024-25080

WebMail in Axigen 10.x before 10.3.3.62 allows XSS via the image attachment viewer...

CVE-2024-25080

WebMail in Axigen 10.x before 10.3.3.62 allows XSS via the image attachment viewer...

Axigen 安全漏洞

Axigen is a mail server with groupware and collaboration features from Axigen, Inc. A security vulnerability exists in Axigen version 10.x prior to 10.3.3.62, which stems from the presence of a cross-site scripting XSS vulnerability...

CVE-2024-25080: Improper Neutralization of Input During Web Page Generation

WebMail in Axigen 10.x before 10.3.3.62 allows XSS via the image attachment viewer...

CVE-2024-25080

Axigen WebMail versions 10.0 through 10.3.3.61 are vulnerable to a cross-site scripting (XSS) flaw within the image attachment viewer . This vulnerability is caused by the improper neutralization of input during web page generation. Exploitation of this issue could allow an attacker to execute ma...

PT-2024-20732 · Axigen · Axigen

Name of the Vulnerable Software and Affected Versions: Axigen versions 10.0 through 10.3.3.61 Description: The issue allows for cross-site scripting XSS via the image attachment viewer in WebMail. This could potentially affect a significant number of devices worldwide, although the exact number i...

CVE-2020-26942

An issue discovered in Axigen Mail Server 10.3.x before 10.3.1.27 and 10.3.2.x before 10.3.3.1 allows unauthenticated attackers to submit a setAdminPassword operation request, subsequently setting a new arbitrary password for the admin account...

CVE-2020-26942

An issue discovered in Axigen Mail Server 10.3.x before 10.3.1.27 and 10.3.2.x before 10.3.3.1 allows unauthenticated attackers to submit a setAdminPassword operation request, subsequently setting a new arbitrary password for the admin account...

Axigen 安全漏洞

Axigen is a mail server with groupware and collaboration features from Axigen, Inc. A security vulnerability exists in Axigen versions 10.3.x prior to 10.3.1.27 and 10.3.2.x prior to 10.3.3.1 The vulnerability stems from a vulnerability that could allow an unauthenticated attacker to submit a...

Cross site request forgery (csrf)

An issue discovered in Axigen Mail Server 10.3.x before 10.3.1.27 and 10.3.2.x before 10.3.3.1 allows unauthenticated attackers to submit a setAdminPassword operation request, subsequently setting a new arbitrary password for the admin account...

CVE-2020-26942

An issue discovered in Axigen Mail Server 10.3.x before 10.3.1.27 and 10.3.2.x before 10.3.3.1 allows unauthenticated attackers to submit a setAdminPassword operation request, subsequently setting a new arbitrary password for the admin account...

CVE-2020-26942

Axigen Mail Server vulnerability CVE-2020-26942 affects Axigen Mail Server 10.3.x before 10.3.1.27 and 10.3.2.x before 10.3.3.1. An unauthenticated attacker can send a setAdminPassword operation request to change the admin password, enabling unauthorized admin access. Impact is described as high ...

CVE-2020-26942

An issue discovered in Axigen Mail Server 10.3.x before 10.3.1.27 and 10.3.2.x before 10.3.3.1 allows unauthenticated attackers to submit a setAdminPassword operation request, subsequently setting a new arbitrary password for the admin account...

PT-2024-10803 · Axigen · Axigen Mail Server

Name of the Vulnerable Software and Affected Versions: Axigen Mail Server versions 10.3.x through 10.3.1.26 Axigen Mail Server versions 10.3.2.x through 10.3.2.x Description: An issue in Axigen Mail Server allows unauthenticated attackers to submit a setAdminPassword operation request, setting a...

CVE-2020-26942: Missing Authentication for Critical Function

An issue discovered in Axigen Mail Server 10.3.x before 10.3.1.27 and 10.3.2.x before 10.3.3.1 allows unauthenticated attackers to submit a setAdminPassword operation request, subsequently setting a new arbitrary password for the admin account...

CVE-2023-49101

WebAdmin in Axigen 10.3.x before 10.3.3.61, 10.4.x before 10.4.24, and 10.5.x before 10.5.10 allows XSS attacks against admins because of mishandling of viewing the usage of SSL certificates...