Skip to content
OpenAdvisories

Vendor

IceWarp

7 known vulnerabilities.

Products

Icewarp Mail Server 3 IceWarp 3 ICEWARP Client 1 EPOS 0
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.0
    CVE-2025-40632

    Cross-site scripting (XSS) vulnerability in IceWarp Mail Server

    Cross-site scripting (XSS) in Icewarp Mail Server affecting version 11.4.0. This vulnerability allows an attacker to modify the “lastLogin” cookie with malicious JavaScript code that will be executed when the page is rendered.

    IceWarp Icewarp Mail Server
  • Low 2.0
    CVE-2025-40631

    HTTP host header injection vulnerability in IceWarp Mail Server

    HTTP host header injection vulnerability in Icewarp Mail Server affecting version 11.4.0. By modifying the Host header and adding a payload, arbitrary JavaScript code can be executed on page load. The user must interact with a malicious link to be redirected.

    IceWarp Icewarp Mail Server