Lucene search

Mail Server Security Vulnerabilities - 2023

cve

CVE-2021-36580

Open Redirect vulnerability exists in IceWarp MailServer IceWarp Server Deep Castle 2 Update 1 (13.0.1.2) via the referer parameter.

6.1CVSS

6.2AI Score

0.003EPSS

2023-07-27 06:15 PM

cve

CVE-2023-39699

IceWarp Mail Server v10.4.5 was discovered to contain a local file inclusion (LFI) vulnerability via the component /calendar/minimizer/index.php. This vulnerability allows attackers to include or execute files from the local file system of the targeted server.

9.8CVSS

9.2AI Score

0.001EPSS

2023-08-25 12:15 AM

cve

CVE-2023-39700

IceWarp Mail Server v10.4.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the color parameter.

6.1CVSS

6AI Score

0.002EPSS

2023-08-25 12:15 AM