All packages
IceWarp vulnerabilities
3 known CVE vulnerabilities in IceWarp, translated and rated.
- CVE-2023-41013Medium
Cross Site Scripting (XSS) vulnerability in the Webmail Calendar of IceWarp 10.3.1 allows remote attackers to inject arbitrary web script or HTML via the "p4" field.
- CVE-2023-39600Medium
IceWarp version 11.4.6.0 was found to contain a cross-site scripting (XSS) vulnerability via the color parameter.
- CVE-2023-37728Medium
IceWarp version 10.2.1 was found to have a cross-site scripting (XSS) vulnerability via the color parameter. An attacker can inject malicious JavaScript code that executes in the victim's browser.