Skip to content
OpenAdvisories

Vendor

IceWarp

7 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.1

    ICEWARP 11.0.0.0 Cross-Site Scripting via Email HTML Injection

    ICEWARP 10.3.4 and 11.0.0.0 contains a cross-site scripting vulnerability that allows attackers to inject malicious HTML elements into emails by embedding base64-encoded payloads in object and embed tags. Attackers can craft emails containing data URIs with e…

  • Medium 5.1
    CVE-2025-40630 Scanner template

    Open redirection vulnerability in IceWarp Mail Server

    Open redirection vulnerability in IceWarp Mail Server affecting version 11.4.0. This vulnerability allows an attacker to redirect a user to any domain by sending a malicious URL to the victim, for example “ https://icewarp.domain.com//<MALICIOUS_DOMAIN>/%2e%2…