2 matches found
CVE-2019-19266: Improper Neutralization of Input During Web Page Generation
IceWarp WebMail Server 12.2.0 and 12.1.x before 12.2.1.1 and probably earlier versions allows XSS issue 2 of 2 in notes for objects...
5.4CVSS6AI score0.00722EPSS
SaveExploits2References2
PT-2020-10117
Name of the Vulnerable Software and Affected Versions IceWarp WebMail Server versions prior to 12.2.1.1 Description The issue allows for XSS in notes for objects. Recommendations For versions prior to 12.2.1.1, update to version 12.2.1.1 or later to resolve the issue...
5.4CVSS0.00722EPSS
SaveExploits2References4
20