CyberSecBulletin

MDaemon vulnerabilities

We track 1 vulnerability in MDaemon products across 2 products. None are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on November 15, 2024.

1vulnerabilities
0critical
0high
1exploited
6.1average CVSS score

Latest MDaemon vulnerabilities

  • 6.1 Medium severity

    MDaemon Email Server Cross-Site Scripting (XSS) Exploited

    CVE-2024-11182MDaemonEPSS 33.5%

    An XSS issue was discovered in MDaemon Email Server before version 24.5.1c. An attacker can send an HTML e-mail message with JavaScript in an img tag. This could allow a remote attacker to load arbitrary JavaScript code in the context of a webmail user's brows