Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: IceWarp Component: Icewarp Clear all filters
TI-2018-15494 CVE-2018-25269 · GHSA-xx24-qg5f-3r29

ICEWARP 11.0.0.0 Cross-Site Scripting via Email HTML Injection

Priority MEDIUM 56

ICEWARP 10.3.4 and 11.0.0.0 contains a cross-site scripting vulnerability that allows attackers to inject malicious HTML elements into emails by embedding base64-encoded payloads in object and embed tags.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.0023 Published 2026-04-22 No fix listed CWE-79
TI-2024-00221 CVE-2024-0246 · GHSA-xpp4-g6wp-qmp7

IceWarp Utility Download cross site scripting

Priority LOW 27

A vulnerability classified as problematic has been found in IceWarp 12.0.2.1/12.0.3.1.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00391 Published 2024-01-05 No fix listed CWE-79