VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Jun 7, 2022· Updated Jun 17, 2026

CVE-2022-31470

CVE-2022-31470

Description

An XSS vulnerability in the index_mobile_changepass.hsp reset-password section of Axigen Mobile WebMail before 10.2.3.12 and 10.3.x before 10.3.3.47 allows attackers to run arbitrary Javascript code that, using an active end-user session (for a logged-in user), can access and retrieve mailbox content.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Gecad Technologies/Mobile WebMail3 versions
    cpe:2.3:a:axigen:axigen_mobile_webmail:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:axigen:axigen_mobile_webmail:*:*:*:*:*:*:*:*range: >=10.2.2.0,<10.2.3.12
    • (no CPE)
    • (no CPE)range: <10.2.3.12, >=10.3.0 <10.3.3.47

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.