Login Request a demo
IC
Product
IceWarp
by IceWarp · last CVE Apr 22, 2026
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news1Timeline
Severity mix
Critical 1High 2Medium 6Low 0
Severity
All severities9Critical1High2Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add IceWarp to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-14500
9.8
2%
Dec 23
IceWarp14 X-File-Operation Command Injection Remote Code Execution Vulnerability
Affected: 14.2.0.5
CVE-2025-14499
8.8
1%
Dec 23
IceWarp gmaps Cross-Site Scripting Authentication Bypass Vulnerability
Affected: 14.2.0.5
CVE-2026-2493
7.5
5%
Mar 13
IceWarp collaboration Directory Traversal Information Disclosure Vulnerability
Affected: 14.2.0.10
CVE-2018-25269
6.1
0%
Apr 22
ICEWARP 11.0.0.0 Cross-Site Scripting via Email HTML Injection
Affected: 11.0.0.0
CVE-2024-55218
6.1
1%
Jan 7
IceWarp Server 10.2.1 is vulnerable to Cross Site Scripting (XSS) via the meta parameter
Affected: 10.2.1
CVE-2024-0246
6.1
0%
Jan 5
A vulnerability classified as problematic has been found in IceWarp 12.0.2.1/12.0.3.1
Affected: 12.0.2.1; 12.0.3.1
CVE-2023-41013
6.1
1%
Sep 12
Cross Site Scripting (XSS) in Webmail Calendar in IceWarp 10.3.1 allows remote attackers to inject arbitrary web script or HTML via the "p4" field
Affected: 10.3.1
CVE-2023-39600
6.1
1%
Aug 25
IceWarp 11.4.6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the color parameter
Affected: 11.4.6.0
CVE-2023-37728
6.1
1%
Jul 20
IceWarp v10.2.1 was discovered to contain cross-site scripting (XSS) vulnerability via the color parameter
Affected: 10.2.1
Showing 9