İçeriğe atla
Noroxi

axigen kayıtları

axigen üreticisine ait 14 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
2
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 22
  3. 23
  4. 24
  5. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

14 kayıt
  • CVE-2022-31470
    40Planlayın

    An XSS vulnerability in the index_mobile_changepass.hsp reset-password section of Axigen Mobile WebMail before 10.2.3.12 and 10.3.x before 1

    OrtaCVSS 6,1Kavram kanıtıEPSS %53

    axigen · axigen mobile webmail7 Haz 2022

  • CVE-2023-48974
    39İzleyin

    Cross Site Scripting vulnerability in Axigen WebMail prior to 10.3.3.61 allows a remote attacker to escalate privileges via a crafted script

    KritikCVSS 9,6Kavram kanıtıEPSS %3

    axigen · axigen mail server7 Şub 2024

  • CVE-2023-23566
    39İzleyin

    A 2-Step Verification problem in Axigen 10.3.3.52 allows an attacker to access a mailbox by bypassing 2-Step Verification when they try to a

    KritikCVSS 9,8İstismar yokEPSS %1

    axigen · axigen mail server13 Oca 2023

  • CVE-2020-26942
    36İzleyin

    An issue discovered in Axigen Mail Server 10.3.x before 10.3.1.27 and 10.3.2.x before 10.3.3.1 allows unauthenticated attackers to submit a

    KritikCVSS 9,1İstismar yokEPSS %0

    axigen · axigen mail server20 Mar 2024

  • CVE-2025-68723
    36İzleyin

    Axigen Mail Server before 10.5.57 contains multiple stored Cross-Site Scripting (XSS) vulnerabilities in the WebAdmin interface.

    KritikCVSS 9,0Kavram kanıtıEPSS %0

    axigen · axigen mail server5 Şub 2026

  • CVE-2025-68722
    35İzleyin

    Axigen Mail Server before 10.5.57 and 10.6.x before 10.6.26 contains a Cross-Site Request Forgery (CSRF) vulnerability in the WebAdmin inter

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    axigen · axigen mail server5 Şub 2026

  • CVE-2025-68721
    32İzleyin

    Axigen Mail Server before 10.5.57 contains an improper access control vulnerability in the WebAdmin interface.

    YüksekCVSS 8,1Kavram kanıtıEPSS %0

    axigen · axigen mail server5 Şub 2026

  • CVE-2024-28589
    26İzleyin

    An issue was discovered in Axigen Mail Server for Windows versions 10.5.18 and before, allows local low-privileged attackers to execute arbi

    OrtaCVSS 6,7Kavram kanıtıEPSS %0

    3 Nis 2024

  • CVE-2024-50601
    24İzleyin

    Persistent and reflected XSS vulnerabilities in the themeMode cookie and _h URL parameter of Axigen Mail Server up to version 10.5.28 allow

    OrtaCVSS 6,1İstismar yokEPSS %0

    11 Kas 2024

  • CVE-2023-49101
    24İzleyin

    WebAdmin in Axigen 10.3.x before 10.3.3.61, 10.4.x before 10.4.24, and 10.5.x before 10.5.10 allows XSS attacks against admins because of mi

    OrtaCVSS 6,1İstismar yokEPSS %0

    axigen · axigen mobile webmail8 Şub 2024

  • CVE-2015-5379
    21İzleyin

    Cross-site scripting (XSS) vulnerability in actions.hsp in the Ajax WebMail interface in AXIGEN Mail Server before 9.0 allows remote attacke

    OrtaCVSS 5,4İstismar yokEPSS %2

    axigen · axigen mail server23 Eki 2017

  • CVE-2023-40355
    21İzleyin

    Cross Site Scripting (XSS) vulnerability in Axigen versions 10.3.3.0 before 10.3.3.59, 10.4.0 before 10.4.19, and 10.5.0 before 10.5.5, allo

    OrtaCVSS 5,4Kavram kanıtıEPSS %1

    axigen · axigen mobile webmail7 Şub 2024

  • CVE-2025-68643
    21İzleyin

    Axigen Mail Server before 10.5.57 allows stored Cross-Site Scripting (XSS) in the handling of the timeFormat account preference parameter.

    OrtaCVSS 5,4İstismar yokEPSS %0

    axigen · axigen mail server5 Şub 2026

  • CVE-2012-2592
    18İzleyin

    Cross-site scripting (XSS) vulnerability in Axigen Mail Server 8.0.1 allows remote attackers to inject arbitrary web script or HTML via the

    OrtaCVSS 4,3Kavram kanıtıEPSS %2

    axigen · axigen mail server18 Haz 2014