Mail Server Security Vulnerabilities and Issues — Mail Server CVE List

Lucene search

IcewarpMail Server

3 matches found

CVE•added 2023/08/25 12:15 a.m.•57 views

CVE-2023-39699

IceWarp Mail Server v10.4.5 was discovered to contain a local file inclusion (LFI) vulnerability via the component /calendar/minimizer/index.php. This vulnerability allows attackers to include or execute files from the local file system of the targeted server.

9.8CVSS9.2AI score0.00537EPSS

CVE•added 2023/07/27 6:15 p.m.•52 views

CVE-2021-36580

Open Redirect vulnerability exists in IceWarp MailServer IceWarp Server Deep Castle 2 Update 1 (13.0.1.2) via the referer parameter.

6.1CVSS6.2AI score0.09851EPSS

CVE•added 2023/08/25 12:15 a.m.•47 views

CVE-2023-39700

IceWarp Mail Server v10.4.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the color parameter.

6.1CVSS6AI score0.14495EPSS