CVE-2023-39700

moderate-risk

Published 2023-08-25

IceWarp Mail Server v10.4.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the color parameter.

Do I need to act?

13.7% chance of exploitation in next 30 days

EPSS score — higher than 86% of all CVEs

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 6.1/10 Medium

NETWORK / LOW complexity

Mail Server

Icewarp

Third Party Advisory https://cwe.mitre.org/data/definitions/79.html

Exploit https://drive.google.com/file/d/1QL_517UbTFJox4CXKQpP9fehR1yXRJ-y

Third Party Advisory https://cwe.mitre.org/data/definitions/79.html

Exploit https://drive.google.com/file/d/1QL_517UbTFJox4CXKQpP9fehR1yXRJ-y

/ 100

moderate-risk

Severity 23/34 · High

Exploitability 12/34 · Low

Exposure 5/34 · Minimal