Barracuda Message Archiver vulnerabilities

2 vulnerabilities

Known vulnerabilities in Barracuda Message Archiver, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1MediumCVE-2018-20369barracuda · message_archiverbarracuda message_archiverBarracuda Message Archiver 2018 has XSS in the error_msg exception-handling value for the ldap_user parameter to the cgi-mod/ldap_load_entry.cgi module. The injection point of the issue is the Add_Update module.EPSS0.69%6.1MediumCVE-2025-8319barracuda · barracuda message archiver +1 morebarracuda barracuda message archiverthe BMA login interface allows arbitrary JavaScript or HTML to be written straight into the page’s Document Object Model via the error= URL parameterEPSS0.27%