Axigen Axigen Mobile Webmail — known CVE vulnerabilities

Every CVE whose affected-product data names Axigen Axigen Mobile Webmail, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2022-31470 — CVSS 6.1 (medium): An XSS vulnerability in the index_mobile_changepass.hsp reset-password section of Axigen Mobile WebMail before 10.2.3.12 and 10.3.x before…
• CVE-2023-49101 — CVSS 6.1 (medium): WebAdmin in Axigen 10.3.x before 10.3.3.61, 10.4.x before 10.4.24, and 10.5.x before 10.5.10 allows XSS attacks against admins because of…
• CVE-2023-40355 — CVSS 5.4 (medium): Cross Site Scripting (XSS) vulnerability in Axigen versions 10.3.3.0 before 10.3.3.59, 10.4.0 before 10.4.19, and 10.5.0 before 10.5.5…