Axigen Axigen Mail Server
9 CVEs affecting Axigen Axigen Mail Server. Latest disclosed: 2026-02-05. Critical: 4, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-23566 | Critical | 9.8 | 2023-01-13 | A 2-Step Verification problem in Axigen 10.3.3.52 allows an attacker to access a mailbox by bypassing 2-Step Verification when they try to add an account to an… |
CVE-2023-48974 | Critical | 9.6 | 2024-02-08 | Cross Site Scripting vulnerability in Axigen WebMail prior to 10.3.3.61 allows a remote attacker to escalate privileges via a crafted script to the serverName_… |
CVE-2020-26942 | Critical | 9.1 | 2024-03-21 | An issue discovered in Axigen Mail Server 10.3.x before 10.3.1.27 and 10.3.2.x before 10.3.3.1 allows unauthenticated attackers to submit a setAdminPassword op… |
CVE-2025-68723 | Critical | 9.0 | 2026-02-05 | Axigen Mail Server before 10.5.57 contains multiple stored Cross-Site Scripting (XSS) vulnerabilities in the WebAdmin interface. Three instances exist: (1) the… |
CVE-2025-68722 | High | 8.8 | 2026-02-05 | Axigen Mail Server before 10.5.57 and 10.6.x before 10.6.26 contains a Cross-Site Request Forgery (CSRF) vulnerability in the WebAdmin interface through improp… |
CVE-2025-68721 | High | 8.1 | 2026-02-05 | Axigen Mail Server before 10.5.57 contains an improper access control vulnerability in the WebAdmin interface. A delegated admin account with zero permissions… |
CVE-2025-68643 | Medium | 5.4 | 2026-02-05 | Axigen Mail Server before 10.5.57 allows stored Cross-Site Scripting (XSS) in the handling of the timeFormat account preference parameter. Attackers can exploi… |
CVE-2015-5379 | Medium | 5.4 | 2017-10-23 | Cross-site scripting (XSS) vulnerability in actions.hsp in the Ajax WebMail interface in AXIGEN Mail Server before 9.0 allows remote attackers to inject arbitr… |
CVE-2012-2592 | | 2014-06-18 | Cross-site scripting (XSS) vulnerability in Axigen Mail Server 8.0.1 allows remote attackers to inject arbitrary web script or HTML via the body of an email. |