Vulnerabilidades do Axigen Axigen Mail Server

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Axigen Axigen Mail Server: 4 registro(s), com versões afetadas e correções.
cpe:2.3:a:axigen:axigen_mail_server

CVE-2025-68723 Crítica · 9.0 CWE-79 05/02/2026

XSS armazenado no WebAdmin do Axigen Mail Server (CVE-2025-68723)

O Axigen Mail Server anterior à versão 10.5.57 contém múltiplas vulnerabilidades de Cross-Site Scripting (XSS) armazenadas na interface WebAdmin. Há três ocorrências: (1) o parâmetro de nome do arquivo de log na página Local Services Log, (2) o conteúdo do arquivo de certificado na funcionalidade SSL Certificates View Usage, e (3) o parâmetro Certificate File name nas configurações SSL de WebMail Listeners. Atacantes podem injetar payloads de JavaScript maliciosos que são executados nos navegadores de administradores quando acessam as páginas ou funcionalidades afetadas, possibilitando ataques de escalonamento de privilégios em que administradores com baixo privilégio podem forçar administradores com alto privilégio a executar ações não autorizadas.

CVE-2025-68643 Média · 5.4 CWE-79 05/02/2026

Cross-site Scripting (XSS) em Axigen Axigen Mail Server

Axigen Mail Server before 10.5.57 allows stored Cross-Site Scripting (XSS) in the handling of the timeFormat account preference parameter. Attackers can exploit this by deploying a multi-stage attack. In the first stage, a malicious JavaScript payload is injected into the timeFormat preference by exploiting a separate vulnerability or using compromised credentials. In the second stage, when the victim logs into the WebMail interface, the unsanitized timeFormat value is loaded from storage and inserted into the DOM, causing the injected script to execute.

CVE-2025-68722 Alta · 8.8 CWE-352 05/02/2026

Cross-Site Request Forgery (CSRF) em Axigen Axigen Mail Server

Axigen Mail Server before 10.5.57 and 10.6.x before 10.6.26 contains a Cross-Site Request Forgery (CSRF) vulnerability in the WebAdmin interface through improper handling of the _s (breadcrumb) parameter. The application accepts state-changing requests via the GET method and automatically processes base64-encoded commands queued in the _s parameter immediately after administrator authentication. Attackers can craft malicious URLs that, when clicked by administrators, execute arbitrary administrative actions upon login without further user interaction, including creating rogue administrator accounts or modifying critical server configurations.

CVE-2025-68721 Alta · 8.1 CWE-284 05/02/2026

Improper Access Control em Axigen Axigen Mail Server

Axigen Mail Server before 10.5.57 contains an improper access control vulnerability in the WebAdmin interface. A delegated admin account with zero permissions can bypass access control checks and gain unauthorized access to the SSL Certificates management endpoint (page=sslcerts). This allows the attacker to view, download, upload, and delete SSL certificate files, despite lacking the necessary privileges to access the Security & Filtering section.