Approved changes feed: RSS · Atom

cpe:2.3:a:icewarp:webclient:10.3.5:*:*:*:*:*:*:*

part: a version: 10.3.5 update: *

VendorIcewarp (c8030f23-957a-58b4-8b02-23bd6cb49d34)
ProductWebclient (2013a5d6-e689-5e6f-8d40-befdda6881ee)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-43319 vulnerable 2026-06-03 14:52:55.454312 Details available
Cross Site Scripting (XSS) vulnerability in the Sign-In page of IceWarp WebClient 10.3.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter.
Published: 2023-09-25T00:00:00.000Z
Updated: 2024-09-24T17:50:28.549Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25925 vulnerable 2026-06-03 14:42:15.591379 Details available
Cross Site Scripting (XSS) in Webmail Calender in IceWarp WebClient 10.3.5 allows remote attackers to inject arbitrary web script or HTML via the "p4" field.
Published: 2021-07-07T13:53:07.000Z
Updated: 2024-08-04T15:49:06.669Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.