CVE-2023-40355

MEDIUM 5.4CVE-2023-40355 · Published 07/02/2024 · updated 17/06/2026

In short

CVE-2023-40355 is a MEDIUM (CVSS 5.4) vulnerability affecting axigen mobile webmail (axigen).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 65.1% of all vulnerabilities.
Fix: update to 10.3.3.59, 10.4.19, 10.5.5 or later.

Package	Affected versions	Patched versions
axigen mobile webmail axigen	`≥ 10.3.3.0, < 10.3.3.59≥ 10.4.0, < 10.4.19≥ 10.5.0, < 10.5.5`	`10.3.3.5910.4.1910.5.5`

Description

Cross Site Scripting (XSS) vulnerability in Axigen versions 10.3.3.0 before 10.3.3.59, 10.4.0 before 10.4.19, and 10.5.0 before 10.5.5, allows authenticated attackers to execute arbitrary code and obtain sensitive information via the logic for switching between the Standard and Ajax versions.

References

axigen.com/knowledgebase/Axigen-WebMail-XSS-Vulnerability-CVE-2023-40355-_396.html · Vendor Advisory

More vulnerabilities in axigen mobile webmail

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free