CVE-2023-48974: Axigen Mail Server

Critical severity, CVSS 9.6. EPSS: 3% chance of exploitation in the next 30 days.

Cross Site Scripting vulnerability in Axigen WebMail prior to 10.3.3.61 allows a remote attacker to escalate privileges via a crafted script to the serverName_input parameter.

Affected products

• Axigen Axigen Mail Server: up to and including 10.5.7

Published 2024-02-08. Last modified 2026-06-17.