Axigen: >> Axigen Mail Server >> 10.3.2.0 Security Vulnerabilities
An issue discovered in Axigen Mail Server 10.3.x before 10.3.1.27 and 10.3.2.x before 10.3.3.1 allows unauthenticated attackers to submit a setAdminPassword operation request, subsequently setting a new arbitrary password for the admin account.
CVSS Score
9.1
EPSS Score
0.002
Published
2024-03-21
Cross Site Scripting vulnerability in Axigen WebMail prior to 10.3.3.61 allows a remote attacker to escalate privileges via a crafted script to the serverName_input parameter.
CVSS Score
9.6
EPSS Score
0.05
Published
2024-02-08