Skip to content
OpenAdvisories

Vendor

Axigen

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.1

    Axigen Mail Server before 10.6.39 and 10.7.1 Stored XSS via Sender Display Name

    Axigen Mail Server WebMail before 10.6.39 and 10.7.1 contains a stored cross-site scripting vulnerability that allows unauthenticated remote attackers to inject script via unescaped sender display names in the conversation view. Attackers can send an email wi…