CVE-2022-31470

Summary of CVE-2022-31470 : The issue is an XSS vulnerability in Axigen Mobile WebMail (and Axigen WebMail entries in related docs) that allows an attacker with an active user session to execute arbitrary JavaScript and access mailbox content. Concrete details across connected sources indicate tw...

CVE-2023-40355

Axigen WebMail contains an XSS vulnerability (CVE-2023-40355) in multiple released lines. Affected are Axigen WebMail server builds: 10.3.3.0–10.3.3.59, 10.4.0–10.4.19, and 10.5.0–10.5.5, where authenticated attackers can exploit the version-switching logic between the Standard and Ajax views to ...

CVE-2023-49101

Axigen WebAdmin vulnerability CVE-2023-49101 is a cross-site scripting issue in the WebAdmin interface tied to mishandling the viewing of SSL certificate usage. Affected series include Axigen 10.3.x before 10.3.3.61, 10.4.x before 10.4.24, and 10.5.x before 10.5.10. The root cause, as described a...