← All advisories

Medium severity6.1NVD Advisory· Published Aug 25, 2023· Updated Jun 17, 2026

CVE-2023-39700

CVE-2023-39700

Description

IceWarp Mail Server v10.4.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the color parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

IceWarp/Server2 versions
cpe:2.3:a:icewarp:mail_server:10.4.5:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:icewarp:mail_server:10.4.5:*:*:*:*:*:*:*
- (no CPE)
IceWarp/Merak Mail Serverllm-fuzzy
Range: v10.4.5

Patches

Vulnerability mechanics

References

3

drive.google.com/file/d/1QL_517UbTFJox4CXKQpP9fehR1yXRJ-ynvdExploitThird Party Advisory
cwe.mitre.org/data/definitions/79.htmlnvdThird Party Advisory
owasp.org/www-project-top-ten/2017/A7_2017-Cross-Site_Scripting_%28XSS%29nvd

News mentions

0

No linked articles in our index yet.