SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2022-31470

An XSS vulnerability in the index_mobile_changepass.hsp reset-password section of Axigen Mobile WebMail before 10.2.3.12 and 10.3.x before 10.3.3.47 allows attackers to run arbitrary Javascript code that, using an active end-user session (for a…

EXPLOITMEDIUM 6.1EPSS 52.7%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 52.7%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.

Description

An XSS vulnerability in the index_mobile_changepass.hsp reset-password section of Axigen Mobile WebMail before 10.2.3.12 and 10.3.x before 10.3.3.47 allows attackers to run arbitrary Javascript code that, using an active end-user session (for a logged-in user), can access and retrieve mailbox content.

CVSS 3.1
6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
52.72% probability · 99th percentile
Public exploits
1 in Exploit-DB · first 8 September 2023
CISA KEV
Not listed
Weakness
CWE-79
Affected
axigen/axigen mobile webmail
Source
cve@mitre.org
EPSS trend
0%28%55%3 November 2026: 52.72%3 November 20263 November 2026

EPSS 52.7% since 3 November 2026; no change recorded yet. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”. Points are recorded when the score first appears and whenever it moves by a percentage point or more.

Public exploits (1)

Entries in Exploit-DB that cite this CVE. Links go to the Exploit-DB page and to the file in the public repository; nothing is hosted here. A verified tick means the Exploit-DB team confirmed the exploit works against the stated version.

EDB-IDTitleTypePublishedVerified
EDB-51722source ↗Axigen < 10.3.3.47_ 10.2.3.12 - Reflected XSSmultiple · AmirZarghamwebapps8 September 2023no

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.