CVE-2023-39700: Icewarp Mail Server

Medium severity, CVSS 6.1. EPSS: 1.5% chance of exploitation in the next 30 days.

IceWarp Mail Server v10.4.5 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the color parameter.

Affected products

• Icewarp Mail Server: version 10.4.5 only

Published 2023-08-25. Last modified 2026-06-17.