Vulnerabilities in IceWarp

7 results

Vexday analysis

IceWarp apresenta um perfil de risco contido com apenas 3 vulnerabilidades conhecidas, nenhuma delas sob exploração ativa confirmada. Destaca-se 1 falha crítica associada a problemas de path traversal (CWE-22), porém sem atividade de disclosure recente que indique pressão imediata.

CVE-2026-2493HIGHIceWarp collaboration Directory Traversal Information Disclosure VulnerabilityEPSS 3.9%CVE-2025-14500CRITICALIceWarp14 X-File-Operation Command Injection Remote Code Execution VulnerabilityEPSS 1.4%CVE-2025-14499HIGHIceWarp gmaps Cross-Site Scripting Authentication Bypass VulnerabilityEPSS 0.8%CVE-2025-40630MEDIUMOpen redirection vulnerability in IceWarp Mail ServerEPSS 0.5%CVE-2018-25269MEDIUMICEWARP 11.0.0.0 Cross-Site Scripting via Email HTML InjectionEPSS 0.2%CVE-2025-40632LOWCross-site scripting (XSS) vulnerability in IceWarp Mail ServerEPSS 0.2%CVE-2025-40631LOWHTTP host header injection vulnerability in IceWarp Mail ServerEPSS 0.2%