VYPR
← All advisories
Unrated severityNVD Advisory· Published May 16, 2025· Updated May 16, 2025

Cross-site scripting (XSS) vulnerability in IceWarp Mail Server

CVE-2025-40632

Description

Cross-site scripting (XSS) in Icewarp Mail Server affecting version 11.4.0. This vulnerability allows an attacker to modify the “lastLogin” cookie with malicious JavaScript code that will be executed when the page is rendered.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • IceWarp/Serverllm-fuzzy2 versions
    =11.4.0+ 1 more
    • (no CPE)range: =11.4.0
    • (no CPE)range: 11.4.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.