IceWarp

Records73All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high15CVSS 7.0–8.9

Exploited now

IceWarp records in CISA KEV

No IceWarp vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Icewarp Server · all components

TI-2021-14809 CVE-2021-36580 · GHSA-5q6m-32cq-4f86

MEDIUM 60

Open Redirect vulnerability exists in IceWarp MailServer IceWarp Server Deep Castle 2 Update 1 (13.0.1.2) via the referer parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01588 Published 2023-07-27 No fix listed CWE-601

TI-2020-06832 CVE-2020-8512 · GHSA-pfvh-chxv-ccfm

MEDIUM 43

In IceWarp Webmail Server through 11.4.4.1, there is XSS in the /webmail/ color parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.14834 Published 2020-01-31 No fix listed CWE-79