peter bassill · operator
$ cve CVE-2020-8512 JSON

CVE-2020-8512 EXPLOIT

6.1
MEDIUM · CVSS 3.1 · EPSS 14.8% (pctl 97)

Patch early

A public exploit exists.

Description

In IceWarp Webmail Server through 11.4.4.1, there is XSS in the /webmail/ color parameter.

Scoring

CVSS6.1 (MEDIUM, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS14.83% — more likely to be exploited than 97% of all CVEs
WeaknessCWE-79
On CISA KEVno
Public exploityes
Published2020-02-01
Last modified2026-06-17

Affected (1)

VendorProduct
icewarpicewarp server

Public exploits

SourceTitleDate
exploit-dbIceWarp WebMail 11.4.4.1 - Reflective Cross-Site Scripting2020-02-03

References

→ the Explorer  ·  watch your stack  ·  NVD