Read the docs

IceWarp

Records73All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high15CVSS 7.0–8.9

Exploited now

IceWarp records in CISA KEV

No IceWarp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Web Mail 25 records MEDIUM Mail Server 19 records HIGH Webclient 10 records MEDIUM Icewarp 6 records MEDIUM Email Server 3 records LOW Merak Mail Server 3 records LOW Webmail Server 3 records LOW Icewarp Server 2 records MEDIUM

Records

3 records in Email Server · all components

TI-2009-01392 CVE-2009-1468 · GHSA-2q28-m2rp-3xjj

Multiple SQL injection vulnerabilities in the search form in server/webmail.php in the…

Priority LOW 33

Multiple SQL injection vulnerabilities in the search form in server/webmail.php in the Groupware component in IceWarp eMail Server and WebMail Server before 9.4.2 allow remote authenticated users to execute arbitrary SQL…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01925 Published 2009-05-05 No fix listed CWE-89
TI-2009-01393 CVE-2009-1469 · GHSA-gm32-4vhp-pm77

CRLF injection vulnerability in the Forgot Password implementation in server/webmail.php…

Priority LOW 28

CRLF injection vulnerability in the Forgot Password implementation in server/webmail.php in IceWarp eMail Server and WebMail Server before 9.4.2 makes it easier for remote attackers to trick a user into disclosing creden…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.04863 Published 2009-05-05 No fix listed CWE-94
Open these records in search →