Skip to content
OpenAdvisories

Product · IceWarp

ICEWARP Client

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2018-25269

    ICEWARP 11.0.0.0 Cross-Site Scripting via Email HTML Injection

    ICEWARP 10.3.4 and 11.0.0.0 contains a cross-site scripting vulnerability that allows attackers to inject malicious HTML elements into emails by embedding base64-encoded payloads in object and embed tags. Attackers can craft emails containing data URIs with e…

    IceWarp ICEWARP Client