CVE-2020-14066

EUVD-2020-6225
IceWarp Email Server 12.3.0.1 allows remote attackers to upload JavaScript files that are dangerous for clients to access.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 86%
Affected Products (NVD)
VendorProductVersion
icewarpmail_server
12.3.0.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/networksecure/icewarp_insecure_permissions
https://www.icewarp.com/download-premise/server/
https://github.com/networksecure/icewarp_insecure_permissions
https://www.icewarp.com/download-premise/server/