CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-3579

server/webmail.php in IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.163

EPSS Ranking 94.5%

CVSS Severity

CVSS v2 Score 6.4

References

Products affected by CVE-2011-3579

Icewarp » Mail Server » Version: 10.0.3

cpe:2.3:a:icewarp:mail_server:10.0.3
Icewarp » Mail Server » Version: 10.0.4

cpe:2.3:a:icewarp:mail_server:10.0.4
Icewarp » Mail Server » Version: 10.0.5

cpe:2.3:a:icewarp:mail_server:10.0.5
Icewarp » Mail Server » Version: 10.0.6

cpe:2.3:a:icewarp:mail_server:10.0.6
Icewarp » Mail Server » Version: 10.0.7

cpe:2.3:a:icewarp:mail_server:10.0.7
Icewarp » Mail Server » Version: 10.0.8

cpe:2.3:a:icewarp:mail_server:10.0.8
Icewarp » Mail Server » Version: 10.1.0

cpe:2.3:a:icewarp:mail_server:10.1.0
Icewarp » Mail Server » Version: 10.1.1

cpe:2.3:a:icewarp:mail_server:10.1.1
Icewarp » Mail Server » Version: 10.1.2

cpe:2.3:a:icewarp:mail_server:10.1.2
Icewarp » Mail Server » Version: 10.1.3

cpe:2.3:a:icewarp:mail_server:10.1.3
Icewarp » Mail Server » Version: 10.1.4

cpe:2.3:a:icewarp:mail_server:10.1.4
Icewarp » Mail Server » Version: 10.2.0

cpe:2.3:a:icewarp:mail_server:10.2.0
Icewarp » Mail Server » Version: 10.2.1

cpe:2.3:a:icewarp:mail_server:10.2.1
Icewarp » Mail Server » Version: 10.2.2

cpe:2.3:a:icewarp:mail_server:10.2.2
Icewarp » Mail Server » Version: 10.3.0

cpe:2.3:a:icewarp:mail_server:10.3.0
Icewarp » Mail Server » Version: 10.3.1

cpe:2.3:a:icewarp:mail_server:10.3.1
Icewarp » Mail Server » Version: 10.3.2

cpe:2.3:a:icewarp:mail_server:10.3.2
Icewarp » Mail Server » Version: 9.3.0

cpe:2.3:a:icewarp:mail_server:9.3.0
Icewarp » Mail Server » Version: 9.3.1

cpe:2.3:a:icewarp:mail_server:9.3.1
Icewarp » Mail Server » Version: 9.3.2

cpe:2.3:a:icewarp:mail_server:9.3.2
Icewarp » Mail Server » Version: 9.4.0

cpe:2.3:a:icewarp:mail_server:9.4.0
Icewarp » Mail Server » Version: 9.4.1

cpe:2.3:a:icewarp:mail_server:9.4.1
Icewarp » Mail Server » Version: 9.4.2

cpe:2.3:a:icewarp:mail_server:9.4.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2011-3579

Products

Pricing

Contact Us