CVEvulnerability

CVE-2023-49101

6.1 MEDIUM Published 2024-02-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2024-02-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-79

Description

WebAdmin in Axigen 10.3.x before 10.3.3.61, 10.4.x before 10.4.24, and 10.5.x before 10.5.10 allows XSS attacks against admins because of mishandling of viewing the usage of SSL certificates.

Affected configurations

• axigen axigen mobile webmail (>= 10.3.3.0 < 10.3.3.61) • axigen axigen mobile webmail (>= 10.4.0 < 10.4.24) • axigen axigen mobile webmail (>= 10.5.0 < 10.5.10)

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References