6.4

CVE-2011-3579

Exploit

server/webmail.php in IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference.

Data is provided by the National Vulnerability Database (NVD)
Icewarp ≫ Mail Server Version <= 10.3.2
Icewarp ≫ Mail Server Version9.3.0
Icewarp ≫ Mail Server Version9.3.1
Icewarp ≫ Mail Server Version9.3.2
Icewarp ≫ Mail Server Version9.4.0
Icewarp ≫ Mail Server Version9.4.1
Icewarp ≫ Mail Server Version9.4.2
Icewarp ≫ Mail Server Version10.0.3
Icewarp ≫ Mail Server Version10.0.4
Icewarp ≫ Mail Server Version10.0.7
Icewarp ≫ Mail Server Version10.0.8
Icewarp ≫ Mail Server Version10.1.1
Icewarp ≫ Mail Server Version10.1.2
Icewarp ≫ Mail Server Version10.1.3
Icewarp ≫ Mail Server Version10.1.4
Icewarp ≫ Mail Server Version10.2.0
Icewarp ≫ Mail Server Version10.2.1
Icewarp ≫ Mail Server Version10.2.2
Icewarp ≫ Mail Server Version10.3.0
Icewarp ≫ Mail Server Version10.3.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 8.55% 0.92
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.4 10 4.9
AV:N/AC:L/Au:N/C:P/I:N/A:P