AX
Vendor
Axigen
14
CVEs
0
On KEV
0
New 30D
Products
AM9.8
Axigen Mail Server
Axigen
11 CVEs0 on KEV0 new
AM6.1
Axigen Mobile Webmail
Axigen
3 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-68723 | AM Axigen Mail Server Axigen | 9.0 | Feb 5 | Axigen Mail Server before 10.5.57 contains multiple stored Cross-Site Scripting (XSS) vulnerabilities in the WebAdmin interface |
| CVE-2025-68643 | AM Axigen Mail Server Axigen | 5.4 | Feb 5 | Axigen Mail Server before 10.5.57 allows stored Cross-Site Scripting (XSS) in the handling of the timeFormat account preference parameter |
| CVE-2025-68722 | AM Axigen Mail Server Axigen | 8.8 | Feb 5 | Axigen Mail Server before 10.5.57 and 10.6.x before 10.6.26 contains a Cross-Site Request Forgery (CSRF) vulnerability in the WebAdmin interface through improper handling of the… |
| CVE-2025-68721 | AM Axigen Mail Server Axigen | 8.1 | Feb 5 | Axigen Mail Server before 10.5.57 contains an improper access control vulnerability in the WebAdmin interface |
| CVE-2024-50601 | AM Axigen Mail Server Axigen | 6.1 | Nov 11 | Persistent and reflected XSS vulnerabilities in the themeMode cookie and _h URL parameter of Axigen Mail Server up to version 10.5.28 allow attackers to execute arbitrary… |
| CVE-2024-28589 | AM Axigen Mail Server Axigen | 6.7 | Apr 3 | An issue was discovered in Axigen Mail Server for Windows versions 10.5.18 and before, allows local low-privileged attackers to execute arbitrary code and escalate privileges via… |
| CVE-2020-26942 | AM Axigen Mail Server Axigen | 9.1 | Mar 6 | An issue discovered in Axigen Mail Server 10.3.x before 10.3.1.27 and 10.3.2.x before 10.3.3.1 allows unauthenticated attackers to submit a setAdminPassword operation request,… |
| CVE-2023-48974 | AM Axigen Mail Server Axigen | 9.6 | Feb 8 | Cross Site Scripting vulnerability in Axigen WebMail prior to 10.3.3.61 allows a remote attacker to escalate privileges via a crafted script to the serverName_input parameter |
| CVE-2023-49101 | AM Axigen Mobile Webmail Axigen | 6.1 | Feb 8 | WebAdmin in Axigen 10.3.x before 10.3.3.61, 10.4.x before 10.4.24, and 10.5.x before 10.5.10 allows XSS attacks against admins because of mishandling of viewing the usage of SSL… |
| CVE-2023-40355 | AM Axigen Mobile Webmail Axigen | 5.4 | Feb 7 | Cross Site Scripting (XSS) vulnerability in Axigen versions 10.3.3.0 before 10.3.3.59, 10.4.0 before 10.4.19, and 10.5.0 before 10.5.5, allows authenticated attackers to execute… |
| CVE-2023-23566 | AM Axigen Mail Server Axigen | 9.8 | Jan 13 | A 2-Step Verification problem in Axigen 10.3.3.52 allows an attacker to access a mailbox by bypassing 2-Step Verification when they try to add an account to any third-party… |
| CVE-2022-31470 | AM Axigen Mobile Webmail Axigen | 6.1 | Jun 7 | An XSS vulnerability in the index_mobile_changepass.hsp reset-password section of Axigen Mobile WebMail before 10.2.3.12 and 10.3.x before 10.3.3.47 allows attackers to run… |
| CVE-2015-5379 | AM Axigen Mail Server Axigen | 5.4 | Oct 23 | Cross-site scripting (XSS) vulnerability in actions.hsp in the Ajax WebMail interface in AXIGEN Mail Server before 9.0 allows remote attackers to inject arbitrary web script or… |
| CVE-2012-2592 | AM Axigen Mail Server Axigen | – | Jun 18 | Cross-site scripting (XSS) vulnerability in Axigen Mail Server 8.0.1 allows remote attackers to inject arbitrary web script or HTML via the body of an email |