Description Multiple cross-site scripting (XSS) vulnerabilities in IceWarp eMail Server and WebMail Server before 9.4.2 allow remote attackers to inject arbitrary web script or HTML via (1) the body of a message, related to the email view and incorrect HTML filtering in the cleanHTML function in server/inc/tools.php; or the (2) title, (3) link, or (4) description element in an RSS feed, related to the getHTML function in server/inc/rss/item.php.
Metrics CVSS Version 4.0 CVSS Version 3.x CVSS Version 2.0 SSVC
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No CVSS 3.x data is available for this CVE.
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration CWE-ID CWE Name Source CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') [email protected]
Affected Products Product Versions icewarp email server <= 9.3.0
2.10.105
2.10.110
2.10.115
2.10.140
2.10.150
2.10.165
2.10.170
2.10.190
2.10.200
2.10.210
2.10.220
2.10.240
2.10.250
2.10.260
2.10.280
2.10.290
2.10.310
2.10.320
2.10.330
2.10.331
2.10.340
2.10.350
2.10.360
3.00.100
3.00.110
3.00.120
3.00.130
3.00.140
3.10.011
3.10.110
4.00.30
4.2.1
4.2.2
4.2.3
4.4.1
4.4.2
4.10.040
4.10.050
5.1.2
5.1.3
5.1.5
5.3.0
5.3.2
5.4.1
5.4.2
5.4.3
5.4.4
5.5.3
5.5.4
5.5.5
5.5.6
5.5.7
5.7.3
5.8.2
5.8.3
5.8.4
5.8.5
5.8.6
5.9.4
6.0.2
6.0.3
6.0.5
6.0.7
6.1.0
6.2.1
7.0.1
7.1.4
7.1.6
7.2.0
7.4.0
7.4.2
7.4.5
7.5.2
7.6.0
7.6.4
8.0.1
8.0.2
8.0.3
8.2.0
8.2.2
8.3.5
8.3.8
8.5.0
8.9.1
9.0.0
9.1.0
9.2.0
Viewing 5 of 88 versions. View all CPE cpe:2.3:a:icewarp:email_server:*:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:2.10.105:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:2.10.110:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:2.10.115:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:2.10.140:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:2.10.150:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:2.10.165:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:2.10.170:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:2.10.190:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:2.10.200:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:2.10.210:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:2.10.220:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:2.10.240:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:2.10.250:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:2.10.260:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:2.10.280:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:2.10.290:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:2.10.310:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:2.10.320:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:2.10.330:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:2.10.331:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:2.10.340:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:2.10.350:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:2.10.360:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:3.00.100:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:3.00.110:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:3.00.120:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:3.00.130:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:3.00.140:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:3.10.011:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:3.10.110:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:4.00.30:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:4.2.1:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:4.2.2:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:4.2.3:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:4.4.1:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:4.4.2:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:4.10.040:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:4.10.050:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:5.1.2:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:5.1.3:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:5.1.5:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:5.3.0:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:5.3.2:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:5.4.1:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:5.4.2:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:5.4.3:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:5.4.4:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:5.5.3:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:5.5.4:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:5.5.5:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:5.5.6:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:5.5.7:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:5.7.3:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:5.8.2:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:5.8.3:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:5.8.4:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:5.8.5:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:5.8.6:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:5.9.4:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:6.0.2:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:6.0.3:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:6.0.5:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:6.0.7:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:6.1.0:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:6.2.1:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:7.0.1:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:7.1.4:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:7.1.6:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:7.2.0:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:7.4.0:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:7.4.2:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:7.4.5:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:7.5.2:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:7.6.0:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:7.6.4:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:8.0.1:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:8.0.2:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:8.0.3:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:8.2.0:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:8.2.2:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:8.3.5:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:8.3.8:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:8.5.0:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:8.9.1:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:9.0.0:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:9.1.0:*:*:*:*:*:*:* cpe:2.3:a:icewarp:email_server:9.2.0:*:*:*:*:*:*:* Remediation No remediation found in references. icewarp webmail server <= 9.3.0
2.10.105
2.10.110
2.10.115
2.10.140
2.10.150
2.10.165
2.10.170
2.10.190
2.10.200
2.10.210
2.10.220
2.10.240
2.10.250
2.10.260
2.10.280
2.10.290
2.10.310
2.10.320
2.10.330
2.10.331
2.10.340
2.10.350
2.10.360
3.00.100
3.00.110
3.00.120
3.00.130
3.00.140
3.10.011
3.10.110
4.00.30
4.2.1
4.2.2
4.2.3
4.4.1
4.4.2
4.10.040
4.10.050
5.1.2
5.1.3
5.1.5
5.3.0
5.3.2
5.4.1
5.4.2
5.4.3
5.4.4
5.5.3
5.5.4
5.5.5
5.5.6
5.5.7
5.7.3
5.8.2
5.8.3
5.8.4
5.8.5
5.8.6
5.9.4
6.0.2
6.0.3
6.0.5
6.0.7
6.1.0
6.2.1
7.0.1
7.1.4
7.1.6
7.2.0
7.4.0
7.4.2
7.4.5
7.5.2
7.6.0
7.6.4
8.0.1
8.0.2
8.0.3
8.2.0
8.2.2
8.3.5
8.3.8
8.5.0
8.9.1
9.0.0
9.1.0
9.2.0
Viewing 5 of 88 versions. View all CPE cpe:2.3:a:icewarp:webmail_server:*:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:2.10.105:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:2.10.110:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:2.10.115:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:2.10.140:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:2.10.150:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:2.10.165:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:2.10.170:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:2.10.190:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:2.10.200:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:2.10.210:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:2.10.220:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:2.10.240:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:2.10.250:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:2.10.260:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:2.10.280:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:2.10.290:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:2.10.310:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:2.10.320:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:2.10.330:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:2.10.331:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:2.10.340:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:2.10.350:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:2.10.360:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:3.00.100:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:3.00.110:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:3.00.120:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:3.00.130:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:3.00.140:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:3.10.011:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:3.10.110:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:4.00.30:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:4.2.1:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:4.2.2:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:4.2.3:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:4.4.1:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:4.4.2:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:4.10.040:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:4.10.050:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:5.1.2:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:5.1.3:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:5.1.5:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:5.3.0:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:5.3.2:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:5.4.1:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:5.4.2:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:5.4.3:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:5.4.4:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:5.5.3:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:5.5.4:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:5.5.5:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:5.5.6:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:5.5.7:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:5.7.3:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:5.8.2:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:5.8.3:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:5.8.4:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:5.8.5:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:5.8.6:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:5.9.4:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:6.0.2:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:6.0.3:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:6.0.5:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:6.0.7:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:6.1.0:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:6.2.1:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:7.0.1:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:7.1.4:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:7.1.6:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:7.2.0:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:7.4.0:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:7.4.2:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:7.4.5:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:7.5.2:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:7.6.0:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:7.6.4:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:8.0.1:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:8.0.2:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:8.0.3:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:8.2.0:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:8.2.2:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:8.3.5:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:8.3.8:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:8.5.0:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:8.9.1:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:9.0.0:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:9.1.0:*:*:*:*:*:*:* cpe:2.3:a:icewarp:webmail_server:9.2.0:*:*:*:*:*:*:* Remediation No remediation found in references.
Change History 7 change records found show changes