Vulnerabilities > Altn
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-08-25 | CVE-2022-37240 | Injection vulnerability in Altn Security Gateway for Email Servers 8.5.2 MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to HTTP Response splitting via the format parameter. | 9.8 |
| 2022-08-25 | CVE-2022-37242 | Injection vulnerability in Altn Security Gateway for Email Servers 8.5.2 MDaemon Technologies SecurityGateway for Email Servers 8.5.2, is vulnerable to HTTP Response splitting via the data parameter. | 9.8 |
| 2022-05-11 | CVE-2022-29975 | Cross-site Scripting vulnerability in Altn Mdaemon An Authenticated Reflected Cross-site scripting at CC Parameter was discovered in MDaemon before 22.0.0 . | 3.5 |
| 2022-05-11 | CVE-2022-29976 | Cross-site Scripting vulnerability in Altn Mdaemon An Authenticated Reflected Cross-site scripting at BCC Parameter was discovered in MDaemon before 22.0.0 . | 3.5 |
| 2022-04-05 | CVE-2022-25356 | XML Injection (aka Blind XPath Injection) vulnerability in Altn Securitygateway Alt-N MDaemon Security Gateway through 8.5.0 allows SecurityGateway.dll?view=login XML Injection. | 5.0 |
| 2021-02-03 | CVE-2020-18724 | Cross-site Scripting vulnerability in Altn Mdaemon Webmail 14.0/20.0.0 Authenticated stored cross-site scripting (XSS) in the contact name field in the distribution list of MDaemon webmail 19.5.5 allows an attacker to executes code and perform a XSS attack while opening a contact list. | 3.5 |
| 2021-02-03 | CVE-2020-18723 | Cross-site Scripting vulnerability in Altn Mdaemon Webmail 14.0/20.0.0 Stored cross-site scripting (XSS) in file attachment field in MDaemon webmail 19.5.5 allows an attacker to execute code on the email recipient side while forwarding an email to perform potentially malicious activities. | 3.5 |
| 2019-12-17 | CVE-2019-19497 | Cross-site Scripting vulnerability in Altn Mdaemon Email Server 17.5.1 MDaemon Email Server 17.5.1 allows XSS via the filename of an attachment to an email message. | 3.5 |
| 2019-07-19 | CVE-2018-17792 | Cross-Site Request Forgery (CSRF) vulnerability in Altn Mdaemon Webmail 14.0 MDaemon Webmail (formerly WorldClient) has CSRF. | 6.8 |
| 2019-07-16 | CVE-2019-13612 | Improper Input Validation vulnerability in Altn Mdaemon Email Server 19 MDaemon Email Server 19 through 20.0.1 skips SpamAssassin checks by default for e-mail messages larger than 2 MB (and limits checks to 10 MB even with special configuration), which is arguably inconsistent with currently popular message sizes. | 5.0 |