Skip to content

Axigen vulnerabilities

Products

Newest

axigen mail server Axigen Mail Server before 10.5.69, 10.6.40, and 10.7.2 Unauthenticated DoS via Nested Requests CVE-2026-119762 8.7 HighOctober 30, 2026
axigen mail server Axigen Mail Server before 10.6.39 and 10.7.1 Stored XSS via Sender Display Name CVE-2026-119761 5.3 MediumOctober 30, 2026
axigen mail server Axigen Mail Server before 10.5.57 contains multiple stored Cross-Site Scripting (XSS)... CVE-2025-68723 Public exploit 9.0 CriticalFebruary 5, 2026
axigen mail server Axigen Mail Server before 10.5.57 and 10.6.x before 10.6.26 contains a Cross-Site Request Forgery... CVE-2025-68722 Public exploit 8.8 HighFebruary 5, 2026
axigen mail server Axigen Mail Server before 10.5.57 contains an improper access control vulnerability in the... CVE-2025-68721 Public exploit 8.1 HighFebruary 5, 2026
axigen mail server Axigen Mail Server before 10.5.57 allows stored Cross-Site Scripting (XSS) in the handling of the... CVE-2025-68643 5.4 MediumFebruary 5, 2026
axigen mail server Persistent and reflected XSS vulnerabilities in the themeMode cookie and _h URL parameter of... CVE-2024-50601 6.1 MediumNovember 11, 2024
axigen mail server An issue was discovered in Axigen Mail Server for Windows versions 10.5.18 and before, allows... CVE-2024-28589 Public exploit 6.7 MediumApril 3, 2024
axigen mail server An issue discovered in Axigen Mail Server 10.3.x before 10.3.1.27 and 10.3.2.x before 10.3.3.1... CVE-2020-26942 9.1 CriticalMarch 6, 2024
axigen mobile webmail WebAdmin in Axigen 10.3.x before 10.3.3.61, 10.4.x before 10.4.24, and 10.5.x before 10.5.10... CVE-2023-49101 6.1 MediumFebruary 8, 2024
axigen mail server Cross Site Scripting vulnerability in Axigen WebMail v.10.5.7 and before allows a remote attacker... CVE-2023-48974 Public exploit 9.6 CriticalFebruary 8, 2024
axigen mobile webmail Cross Site Scripting (XSS) vulnerability in Axigen versions 10.3.3.0 before 10.3.3.59, 10.4.0... CVE-2023-40355 Public exploit 5.4 MediumFebruary 7, 2024
axigen mail server A 2-Step Verification problem in Axigen 10.3.3.52 allows an attacker to access a mailbox by... CVE-2023-23566 9.8 CriticalJanuary 13, 2023
axigen mobile webmail An XSS vulnerability in the index_mobile_changepass.hsp reset-password section of Axigen Mobile... CVE-2022-31470 Public exploit EPSS 52.7% 6.1 MediumJune 7, 2022
axigen mail server Cross-site scripting (XSS) vulnerability in actions.hsp in the Ajax WebMail interface in AXIGEN... CVE-2015-5379 5.4 MediumOctober 23, 2017
axigen mail server Cross-site scripting (XSS) vulnerability in Axigen Mail Server 8.0.1 allows remote attackers to... CVE-2012-2592 Public exploit 4.3 MediumJune 18, 2014