CVE-2017-12844: XSS
Cross-site scripting (XSS) vulnerability in the admin panel in IceWarp Mail Server 10.4.4 allows remote authenticated domain administrators to inject arbitrary web script or HTML via a crafted user name.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-12844?
CVE-2017-12844 is classified as a medium severity vulnerability due to its potential impact on web application security.
How do I fix CVE-2017-12844?
To mitigate CVE-2017-12844, update IceWarp Mail Server to the latest version that addresses this vulnerability.
Who is affected by CVE-2017-12844?
CVE-2017-12844 affects remote authenticated domain administrators using IceWarp Mail Server version 10.4.4.
What kind of attack does CVE-2017-12844 enable?
CVE-2017-12844 enables cross-site scripting (XSS) attacks, allowing injection of arbitrary web scripts or HTML.
Is CVE-2017-12844 a local or remote vulnerability?
CVE-2017-12844 is a remote vulnerability, requiring authentication by domain administrators to exploit.