Altn Security Gateway For Email Servers — known CVE vulnerabilities

Every CVE whose affected-product data names Altn Security Gateway For Email Servers, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2022-37242 — CVSS 9.8 (critical): MDaemon Technologies SecurityGateway for Email Servers 8.5.2, is vulnerable to HTTP Response splitting via the data parameter.
• CVE-2022-37240 — CVSS 9.8 (critical): MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to HTTP Response splitting via the format parameter.
• CVE-2022-37241 — CVSS 5.4 (medium): MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the data_leak_list_ajax…
• CVE-2022-37243 — CVSS 5.4 (medium): MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the whitelist endpoint.
• CVE-2022-37244 — CVSS 5.4 (medium): MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to IFRAME Injectionvia the currentRequest parameter. after login…
• CVE-2022-37238 — CVSS 5.4 (medium): MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the currentRequest parameter.
• CVE-2022-37245 — CVSS 5.4 (medium): MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the Blacklist endpoint.
• CVE-2022-37239 — CVSS 5.4 (medium): MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the rulles_list_ajax endpoint.