Login Request a demo
WE
Product
Webclient
by Icewarp · last CVE Sep 25, 2023
10
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 0High 2Medium 8Low 0
Severity
All severities10Critical0High2Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Webclient to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2010-5335
7.5
3%
Oct 11
IceWarp Webclient before 10.2.1 has a directory traversal vulnerability
Affected: 10.0 before 10.2.1
CVE-2010-5334
7.5
3%
Oct 11
IceWarp Webclient before 10.2.1 has a directory traversal vulnerability
Affected: 10.0 before 10.2.1
CVE-2023-43319
6.1
1%
Sep 25
Cross Site Scripting (XSS) vulnerability in the Sign-In page of IceWarp WebClient 10.3.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected…
Affected: 10.3.5
CVE-2023-39598
6.1
1%
Sep 5
Cross Site Scripting vulnerability in IceWarp Corporation WebClient v.10.2.1 allows a remote attacker to execute arbitrary code via a crafted payload to the mid parameter
Affected: 10.2.1
CVE-2020-25925
6.1
1%
Jul 7
Cross Site Scripting (XSS) in Webmail Calender in IceWarp WebClient 10.3.5 allows remote attackers to inject arbitrary web script or HTML via the "p4" field
Affected: 10.3.5
CVE-2010-5340
6.1
1%
Oct 11
IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/ with the parameter password is non-persistent in 10.2.0
Affected: 10.0 before 10.2.1
CVE-2010-5339
6.1
1%
Oct 11
IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][uid] is non-persistent in 10.1.3 and 10.2.0
Affected: 10.0 before 10.2.1
CVE-2010-5338
6.1
1%
Oct 11
IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][action] is non-persistent in 10.1.3 and 10.2.0
Affected: 10.0 before 10.2.1
CVE-2010-5337
6.1
1%
Oct 11
IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: webmail/basic/ with the parameter _dlg[captcha][controller] is non-persistent in 10.1.3 and 10.2.0
Affected: 10.0 before 10.2.1
CVE-2010-5336
6.1
1%
Oct 11
IceWarp Webclient before 10.2.1 has XSS via an HTTP POST request: admin/login.html with the parameter username is persistent in 10.2.0
Affected: before 10.2.1
Showing 10