Vulnerabilities (CVE)

Filtered by vendor Icewarp Subscribe
Filtered by product Icewarp
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-41013 1 Icewarp 1 Icewarp 2024-11-21 N/A 6.1 MEDIUM
Cross Site Scripting (XSS) in Webmail Calendar in IceWarp 10.3.1 allows remote attackers to inject arbitrary web script or HTML via the "p4" field.
CVE-2023-39600 1 Icewarp 1 Icewarp 2024-11-21 N/A 6.1 MEDIUM
IceWarp 11.4.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the color parameter.
CVE-2023-37728 1 Icewarp 1 Icewarp 2024-11-21 N/A 6.1 MEDIUM
IceWarp v10.2.1 was discovered to contain cross-site scripting (XSS) vulnerability via the color parameter.