IceWarp vulnerabilities
7 published CVEs name IceWarp among the affected products.
- 7Published CVEs7 of them scored
- 4Last 12 monthspublished in the last year
- 1Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2018-25269
ICEWARP 11.0.0.0 Cross-Site Scripting via Email HTML Injection
icewarp · ICEWARP Client
Medium5.1 - CVE-2026-2493
IceWarp collaboration Directory Traversal Information Disclosure Vulnerability
IceWarp · IceWarp
High7.5 - CVE-2025-14500
IceWarp14 X-File-Operation Command Injection Remote Code Execution Vulnerability
IceWarp · IceWarp
Critical9.8 - CVE-2025-14499
IceWarp gmaps Cross-Site Scripting Authentication Bypass Vulnerability
IceWarp · IceWarp
High8.8 - CVE-2025-40632
Cross-site scripting (XSS) vulnerability in IceWarp Mail Server
Icewarp · Icewarp Mail Server
Low2.0 - CVE-2025-40631
HTTP host header injection vulnerability in IceWarp Mail Server
Icewarp · Icewarp Mail Server
Low2.0 - CVE-2025-40630
Open redirection vulnerability in IceWarp Mail Server
Icewarp · Icewarp Mail Server
Medium5.1