Login Request a demo
AM
Product
Axigen Mail Server
by Axigen · last CVE Feb 5, 2026
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 4High 2Medium 4Low 0
Severity
All severities11Critical4High2Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Axigen Mail Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-28589
6.7
0%
Apr 3
An issue was discovered in Axigen Mail Server for Windows versions 10.5.18 and before, allows local low-privileged attackers to execute arbitrary code and escalate privileges via…
Affected: through 10.5.18
CVE-2024-50601
6.1
0%
Nov 11
Persistent and reflected XSS vulnerabilities in the themeMode cookie and _h URL parameter of Axigen Mail Server up to version 10.5.28 allow attackers to execute arbitrary…
Affected: through 10.5.28
CVE-2025-68643
5.4
0%
Feb 5
Axigen Mail Server before 10.5.57 allows stored Cross-Site Scripting (XSS) in the handling of the timeFormat account preference parameter
Affected: 10.3.0 before 10.5.57; 10.6.0 before 10.6.26
CVE-2015-5379
5.4
2%
Oct 23
Cross-site scripting (XSS) vulnerability in actions.hsp in the Ajax WebMail interface in AXIGEN Mail Server before 9.0 allows remote attackers to inject arbitrary web script or…
Affected: 8.0; 8.0.1; 8.0.2; 8.0.3; 8.1.0; 8.1.1; +3 more
Showing 4