CVE-2023-49101

—

CVSS 3.1

6.1 medium

EPSS

<1%p9

Published

Feb 8, 2024 (Feb 8, 2024)

Modified

Jun 17, 2026

Description

WebAdmin in Axigen 10.3.x before 10.3.3.61, 10.4.x before 10.4.24, and 10.5.x before 10.5.10 allows XSS attacks against admins because of mishandling of viewing the usage of SSL certificates.

Vendors: axigen
Products: axigen mobile webmail
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.