CVE-2021-36580

moderate-risk
Published 2023-07-27

Open Redirect vulnerability exists in IceWarp MailServer IceWarp Server Deep Castle 2 Update 1 (13.0.1.2) via the referer parameter.

Do I need to act?

~
9.6% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
6
CVSS 6.1/10 Medium
NETWORK / LOW complexity

Affected Products (2)

Affected Vendors

Icewarp

References (6)

Product http://icewarp.com
Permissions Required http://mail.ziyan.com
https://medium.com/%40rohitgautam26/cve-2021-36580-69219798231c
Product http://icewarp.com
Permissions Required http://mail.ziyan.com
https://medium.com/%40rohitgautam26/cve-2021-36580-69219798231c
41
/ 100
moderate-risk
Severity 23/34 · High
Exploitability 11/34 · Low
Exposure 7/34 · Low