CVE-2025-68722

CVE-2025-68722: Axigen WebAdmin CSRF Resumen de la vulnerabilidad Acciones críticas que cambian el estado en la interfaz Axigen WebAdmin son accesibles mediante solicitudes GET. Si bien el token h protege contra el CSRF directo, la aplicación procesa solicitudes en cola a través del parámetro s...

CVE-2025-68723

CVE-2025-68723: Axigen WebAdmin Stored XSS Riepilogo della vulnerabilità Molti campi di input nell'interfaccia WebAdmin di Axigen non eseguono una corretta sanitizzazione, consentendo l'esecuzione di JavaScript malevolo. Queste vulnerabilità permettono a un amministratore con privilegi ridotti o ...

CVE-2025-68721

CVE-2025-68721: Controllo degli accessi non corretto in Axigen WebAdmin Riepilogo della vulnerabilità Un difetto nella logica delle autorizzazioni consente a un account amministratore con zero permessi di accedere alla pagina "Sicurezza e Filtraggio", in particolare all'endpoint dei Certificati...

CVE-2025-68721

Axigen Mail Server before 10.5.57 contains an improper access control vulnerability in the WebAdmin interface. A delegated admin account with zero permissions can bypass access control checks and gain unauthorized access to the SSL Certificates management endpoint page=sslcerts. This allows the...

CVE-2025-68722

Axigen Mail Server before 10.5.57 and 10.6.x before 10.6.26 contains a Cross-Site Request Forgery CSRF vulnerability in the WebAdmin interface through improper handling of the s breadcrumb parameter. The application accepts state-changing requests via the GET method and automatically processes...

EUVD-2025-206825

Axigen Mail Server before 10.5.57 and 10.6.x before 10.6.26 contains a Cross-Site Request Forgery CSRF vulnerability in the WebAdmin interface through improper handling of the s breadcrumb parameter. The application accepts state-changing requests via the GET method and automatically processes...

CVE-2025-68721

Axigen Mail Server before 10.5.57 contains an improper access control vulnerability in the WebAdmin interface. A delegated admin account with zero permissions can bypass access control checks and gain unauthorized access to the SSL Certificates management endpoint page=sslcerts. This allows the...

Axigen Arbitrary File Read And Delete

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Axigen Arbitrary File Read and Delete', 'Description' = %q This module exploits a directory traversal vulnerability in the WebAdmin interface of...

CVE-2023-49101

WebAdmin in Axigen 10.3.x before 10.3.3.61, 10.4.x before 10.4.24, and 10.5.x before 10.5.10 allows XSS attacks against admins because of mishandling of viewing the usage of SSL certificates...

CVE-2023-49101

WebAdmin in Axigen 10.3.x before 10.3.3.61, 10.4.x before 10.4.24, and 10.5.x before 10.5.10 allows XSS attacks against admins because of mishandling of viewing the usage of SSL certificates...