-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security

Vulnerability Details

Registries

Custom Views

Weaknesses

Attack Patterns

Filters & Tools

iredadmin

Source -

NVD

CNA CVEs -

0

ADP CVEs -

0

CISA CVEs -

0

NVD CVEs -

1

Related CVEs Related Vendors Related Assigners Reports

1Vulnerabilities found

Assigner-MITRE Corporation

Assigner-MITRE Corporation

CVSS Score-6.1||MEDIUM

EPSS-0.18% / 39.88%

||

7 Day CHG~0.00%

Published-23 Sep, 2024 | 00:00

Updated-25 Mar, 2025 | 15:15

Rejected-Not Available

Known To Be Used In Ransomware Campaigns?-Not Available

KEV Added-Not Available

KEV Action Due Date-Not Available

iRedAdmin before 2.6 allows XSS, e.g., via order_name.

Action-Not Available

Vendor-iredmail n/a

Product-iredadmin n/a

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')