Approved changes feed: RSS · Atom

cpe:2.3:a:mdaemon:email_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMdaemon (4d7d99d5-5c42-5610-8afe-a4c3c6b2f895)
ProductEmail Server (e7651eac-a5ee-56db-aef0-5e4c454289c7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-3929 vulnerable 2026-06-08 07:23:10.160830 Stored XSS vulnerability in MDaemon Email Server
An XSS issue was discovered in MDaemon Email Server version 25.0.1 and below. An attacker can send a specially crafted HTML e-mail message with JavaScript in an img tag. This could allow a remote attacker to load arbitrary JavaScript code in the context of a webmail user's browser window, and access user data.
Published: 2025-04-29T11:36:33.507Z
Updated: 2025-04-29T13:19:29.916Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-11182 vulnerable 2026-06-08 06:23:49.002794 Stored XSS vulnerability in MDaemon Email Server
An XSS issue was discovered in MDaemon Email Server before version 24.5.1c. An attacker can send an HTML e-mail message with JavaScript in an img tag. This could allow a remote attacker to load arbitrary JavaScript code in the context of a webmail user's browser window.
Published: 2024-11-15T10:43:10.960Z
Updated: 2025-10-21T22:55:36.394Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.