Read the docs

IceWarp

Records73All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high15CVSS 7.0–8.9

Exploited now

IceWarp records in CISA KEV

No IceWarp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Web Mail 25 records MEDIUM Mail Server 19 records HIGH Webclient 10 records MEDIUM Icewarp 6 records MEDIUM Email Server 3 records LOW Merak Mail Server 3 records LOW Webmail Server 3 records LOW Icewarp Server 2 records MEDIUM

Records

6 records in Icewarp · all components

TI-2018-15494 CVE-2018-25269 · GHSA-xx24-qg5f-3r29

ICEWARP 11.0.0.0 Cross-Site Scripting via Email HTML Injection

Priority MEDIUM 56

ICEWARP 10.3.4 and 11.0.0.0 contains a cross-site scripting vulnerability that allows attackers to inject malicious HTML elements into emails by embedding base64-encoded payloads in object and embed tags.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.0023 Published 2026-04-22 No fix listed CWE-79
TI-2024-00221 CVE-2024-0246 · GHSA-xpp4-g6wp-qmp7

IceWarp Utility Download cross site scripting

Priority LOW 27

A vulnerability classified as problematic has been found in IceWarp 12.0.2.1/12.0.3.1.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00391 Published 2024-01-05 No fix listed CWE-79
Open these records in search →