Vulnerability Details CVE-2022-35115
IceWarp WebClient DC2 - Update 2 Build 9 (13.0.2.9) was discovered to contain a SQL injection vulnerability via the search parameter at /webmail/server/webmail.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 50.3%
CVSS Severity
CVSS v3 Score 9.8
References
Products affected by CVE-2022-35115
-
cpe:2.3:a:icewarp:webclient_dc2:13.0.2.9