PatchTheCVE: security gateway for email servershttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2022-37238: MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via thttps://patchthecve.com/cve/CVE-2022-37238.htmlhttps://patchthecve.com/cve/CVE-2022-37238.htmlWed, 17 Jun 2026 04:54:46 +0000MEDIUM 5.4: MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the currentRequest parameter.CVE-2022-37245: MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via thttps://patchthecve.com/cve/CVE-2022-37245.htmlhttps://patchthecve.com/cve/CVE-2022-37245.htmlWed, 17 Jun 2026 04:54:47 +0000MEDIUM 5.4: MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the Blacklist endpoint.CVE-2022-37244: MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to IFRAME Injectionvia the currentRhttps://patchthecve.com/cve/CVE-2022-37244.htmlhttps://patchthecve.com/cve/CVE-2022-37244.htmlWed, 17 Jun 2026 04:54:47 +0000MEDIUM 5.4: MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to IFRAME Injectionvia the currentRequest parameter. after login leads to inject malicious tag leads to IFRAME injection.CVE-2022-37243: MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via thttps://patchthecve.com/cve/CVE-2022-37243.htmlhttps://patchthecve.com/cve/CVE-2022-37243.htmlWed, 17 Jun 2026 04:54:47 +0000MEDIUM 5.4: MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the whitelist endpoint.CVE-2022-37242: MDaemon Technologies SecurityGateway for Email Servers 8.5.2, is vulnerable to HTTP Response splitting via thehttps://patchthecve.com/cve/CVE-2022-37242.htmlhttps://patchthecve.com/cve/CVE-2022-37242.htmlWed, 17 Jun 2026 04:54:47 +0000CRITICAL 9.8: MDaemon Technologies SecurityGateway for Email Servers 8.5.2, is vulnerable to HTTP Response splitting via the data parameter.CVE-2022-37241: MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via thttps://patchthecve.com/cve/CVE-2022-37241.htmlhttps://patchthecve.com/cve/CVE-2022-37241.htmlWed, 17 Jun 2026 04:54:47 +0000MEDIUM 5.4: MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the data_leak_list_ajax endpoint.CVE-2022-37240: MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to HTTP Response splitting via the https://patchthecve.com/cve/CVE-2022-37240.htmlhttps://patchthecve.com/cve/CVE-2022-37240.htmlWed, 17 Jun 2026 04:54:47 +0000CRITICAL 9.8: MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to HTTP Response splitting via the format parameter.CVE-2022-37239: MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via thttps://patchthecve.com/cve/CVE-2022-37239.htmlhttps://patchthecve.com/cve/CVE-2022-37239.htmlWed, 17 Jun 2026 04:54:46 +0000MEDIUM 5.4: MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to Cross Site Scripting (XSS) via the rulles_list_ajax endpoint.