PT-2025-21634 · Icewarp · Icewarp Mail Server

Name of the Vulnerable Software and Affected Versions: Icwarp Mail Server version 11.4.0 Description: The issue allows for HTTP host header injection, enabling the execution of arbitrary JavaScript code on page load when a user interacts with a malicious link. This is achieved by modifying the Ho...

SUSE CVE-2017-12844

Cross-site scripting XSS vulnerability in the admin panel in IceWarp Mail Server 10.4.4 allows remote authenticated domain administrators to inject arbitrary web script or HTML via a crafted user name...

CVE-2024-55218

IceWarp Server 10.2.1 is vulnerable to Cross Site Scripting XSS via the meta parameter...

CVE-2024-55218

IceWarp Server 10.2.1 is vulnerable to Cross Site Scripting XSS via the meta parameter...

IceWarp Server 跨站脚本漏洞

IceWarp Server is a mailing server from the Czech company IceWarp. A security vulnerability exists in IceWarp Server version 10.2.1, which stems from insufficient handling of meta parameters, resulting in vulnerability to cross-site scripting attacks...

CVE-2024-55218

IceWarp Server 10.2.1 is vulnerable to Cross Site Scripting XSS via the meta parameter...

CVE-2024-55218

CVE-2024-55218 affects IceWarp Server 10.2.1. The issue is a Cross-Site Scripting (XSS) vulnerability exploitable via the meta parameter, allowing attackers to inject JavaScript in victims’ browsers when visiting crafted URLs. The nuclei template and vendor/NVD entries confirm this XSS in IceWarp...

CVE-2024-55218

IceWarp Server 10.2.1 is vulnerable to Cross Site Scripting XSS via the meta parameter...

VulnCheck KEV: CVE-2020-27982

IceWarp 11.4.5.0 allows XSS via the language parameter...

CVE-2024-0246

A vulnerability classified as problematic has been found in IceWarp 12.0.2.1/12.0.3.1. This affects an unknown part of the file /install/ of the component Utility Download Handler. The manipulation of the argument lang with the input 1%27"%26%25alertdocument.domain leads to cross site scripting. ...

CVE-2024-0246

A vulnerability classified as problematic has been found in IceWarp 12.0.2.1/12.0.3.1. This affects an unknown part of the file /install/ of the component Utility Download Handler. The manipulation of the argument lang with the input 1%27"%26%25alertdocument.domain leads to cross site scripting. ...

Cross site scripting

A vulnerability classified as problematic has been found in IceWarp 12.0.2.1/12.0.3.1. This affects an unknown part of the file /install/ of the component Utility Download Handler. The manipulation of the argument lang with the input 1%27"%26%25alertdocument.domain leads to cross site scripting. ...

CVE-2024-0246 IceWarp Utility Download cross site scripting

A vulnerability classified as problematic has been found in IceWarp 12.0.2.1/12.0.3.1. This affects an unknown part of the file /install/ of the component Utility Download Handler. The manipulation of the argument lang with the input 1%27"%26%25alertdocument.domain leads to cross site scripting. ...

CVE-2024-0246 IceWarp Utility Download cross site scripting

A vulnerability classified as problematic has been found in IceWarp 12.0.2.1/12.0.3.1. This affects an unknown part of the file /install/ of the component Utility Download Handler. The manipulation of the argument lang with the input 1%27"%26%25alertdocument.domain leads to cross site scripting. ...

CVE-2024-0246

IceWarp 12.0.2.1/12.0.3.1 has a cross-site scripting vulnerability in the Utility Download Handler’s /install/ path, triggered by manipulating the lang parameter. The issue, described across multiple feeds, can be exploited remotely and uses input like 1%27"()%26%25. Public disclosure is noted; v...

IceWarp Cross-Site Scripting Vulnerability

IceWarp is an integrated enterprise communication and collaboration platform from IceWarp, a Czech company, designed to provide organizations with a variety of tools and features to support internal and external communication, collaboration and business processes. A cross-site scripting...

PT-2024-15408 · Icewarp · Icewarp

Name of the Vulnerable Software and Affected Versions: IceWarp versions 12.0.2.1 through 12.0.3.1 Description: A problematic issue has been discovered, affecting the Utility Download Handler component in the /install/ file. The issue can be exploited by manipulating the lang argument with a...

VulnCheck KEV: CVE-2019-12593

IceWarp Mail Server through 10.4.4 is prone to a local file inclusion vulnerability via webmail/calendar/minimizer/index.php?style=..%5c directory traversal...

The vulnerability of the IceWarp Server, related to the lack of measures taken to protect the structure of web pages, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the IceWarp Server web server is related to the lack of measures taken to protect the structure of the web page when processing the color parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

The vulnerability of the IceWarp Server, related to the lack of measures taken to protect the structure of web pages, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the IceWarp Server web server is related to the lack of measures taken to protect the structure of the website. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...