Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 7:24 a.m.•20 views

CVE-2024-0246

A vulnerability classified as problematic has been found in IceWarp 12.0.2.1/12.0.3.1. This affects an unknown part of the file /install/ of the component Utility Download Handler. The manipulation of the argument lang with the input 1%27"%26%25 leads to cross site scripting. It is possible to...

6.1CVSS6AI score0.00391EPSS
SaveExploits0References1
NVD
NVD
•added 2024/01/05 2:15 p.m.•28 views

CVE-2024-0246

A vulnerability classified as problematic has been found in IceWarp 12.0.2.1/12.0.3.1. This affects an unknown part of the file /install/ of the component Utility Download Handler. The manipulation of the argument lang with the input 1%27"%26%25alertdocument.domain leads to cross site scripting. ...

6.1CVSS4.7AI score0.00391EPSS
SaveExploits0References2
Prion
Prion
•added 2024/01/05 2:15 p.m.•30 views

Cross site scripting

A vulnerability classified as problematic has been found in IceWarp 12.0.2.1/12.0.3.1. This affects an unknown part of the file /install/ of the component Utility Download Handler. The manipulation of the argument lang with the input 1%27"%26%25alertdocument.domain leads to cross site scripting. ...

5CVSS6.3AI score0.00391EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2024/01/05 2:00 p.m.•22 views

CVE-2024-0246 IceWarp Utility Download cross site scripting

A vulnerability classified as problematic has been found in IceWarp 12.0.2.1/12.0.3.1. This affects an unknown part of the file /install/ of the component Utility Download Handler. The manipulation of the argument lang with the input 1%27"%26%25alertdocument.domain leads to cross site scripting. ...

5CVSS6AI score0.00391EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/01/05 2:00 p.m.•35 views

CVE-2024-0246 IceWarp Utility Download cross site scripting

A vulnerability classified as problematic has been found in IceWarp 12.0.2.1/12.0.3.1. This affects an unknown part of the file /install/ of the component Utility Download Handler. The manipulation of the argument lang with the input 1%27"%26%25alertdocument.domain leads to cross site scripting. ...

5CVSS6.1AI score0.00391EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/05 12:00 a.m.•7 views

CVE-2024-0246: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in IceWarp 12.0.2.1/12.0.3.1. This affects an unknown part of the file /install/ of the component Utility Download Handler. The manipulation of the argument lang with the input 1%27"%26%25 leads to cross site scripting. It is possible to...

6.1CVSS3.8AI score0.00391EPSS
SaveExploits0References2
Rows per page
Query Builder