CVE-2022-27105: Digitus Inmailx

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

InMailX Outlook Plugin < 3.22.0101 is vulnerable to Cross Site Scripting (XSS). InMailX Connection names are not sanitzed in the Outlook tab, which allows a local user or network administrator to execute HTML / Javascript in the Outlook of users.

Affected products

• Digitus Inmailx: from 3.21.0601, before 3.22.0101 (fixed in 3.22.0101)

Published 2022-07-26. Last modified 2026-06-17.