What’s Vulnerable › Vulnerabilities

CVE-2017-7855

• Severity: medium (CVSS 6.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-08-31 · updated 2026-06-17
• Weakness: CWE-79

Description

In the webmail component in IceWarp Server 11.3.1.5, there was an XSS vulnerability discovered in the "language" parameter.

Affected products

• IceWarp Server: 11.3.1.5

References

• https://technical.nttsecurity.com/post/102eegq/cookies-are-delicious
• https://technical.nttsecurity.com/post/102eegq/cookies-are-delicious

Get alerted when CVE-2017-7855 or the next vulnerability affects your stack