Security Gateway For Email Servers

security_gateway_for_email_servers

Vendor: Altn • 8 CVEs

CVEs (8)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-37238 1Altn 1Security Gateway For Email Servers Jun 17, 2026 Aug 25, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the currentRequest parameter.
CVE-2022-37245 1Altn 1Security Gateway For Email Servers Jun 17, 2026 Aug 25, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the Blacklist endpoint.
CVE-2022-37244 1Altn 1Security Gateway For Email Servers Jun 17, 2026 Aug 25, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to IFRAME Injectionvia the currentRequest parameter. after login leads to inject malicious tag leads to IFRAME injection.
CVE-2022-37243 1Altn 1Security Gateway For Email Servers Jun 17, 2026 Aug 25, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the whitelist endpoint.
CVE-2022-37242 1Altn 1Security Gateway For Email Servers Jun 17, 2026 Aug 25, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 MDaemon Technologies SecurityGateway for Email Servers 8.5.2, is vulnerable to HTTP Response splitting via the data parameter.
CVE-2022-37241 1Altn 1Security Gateway For Email Servers Jun 17, 2026 Aug 25, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the data_leak_list_ajax endpoint.
CVE-2022-37240 1Altn 1Security Gateway For Email Servers Jun 17, 2026 Aug 25, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to HTTP Response splitting via the format parameter.
CVE-2022-37239 1Altn 1Security Gateway For Email Servers Jun 17, 2026 Aug 25, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the rulles_list_ajax endpoint.