Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2022-37241 Details

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the data_leak_list_ajax endpoint.

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.4 MEDIUMVector:CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://files.mdaemon.com/securitygateway/release/relnotes_en.htm	CVE	Release NotesVendor Advisory
https://gtn.com.np/wp-content/uploads/2022/07/Stored-Cross-Site-Scripting-XSS-at-data_leak_list_ajax-endpoint.pdf	CVE	ExploitThird Party Advisory
https://files.mdaemon.com/securitygateway/release/relnotes_en.htm	[email protected]	Release NotesVendor Advisory
https://gtn.com.np/wp-content/uploads/2022/07/Stored-Cross-Site-Scripting-XSS-at-data_leak_list_ajax-endpoint.pdf	[email protected]	ExploitThird Party Advisory

CWE-ID	CWE Name	Source
CWE-79	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	[email protected]

Product	Versions
altn security gateway for email servers	8.5.2
CPE cpe:2.3:a:altn:security_gateway_for_email_servers:8.5.2:::::::* Remediation No remediation found in references.

4 change records found show changes

QUICK INFO