CVE-2017-7855

MEDIUM NUCLEI

IceWarp Server 11.3.1.5 - Cross-Site Scripting via Language Parameter

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2017-7855 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.

Description

In the webmail component in IceWarp Server 11.3.1.5, there was an XSS vulnerability discovered in the "language" parameter.

Nuclei Templates (1)

IceWarp WebMail 11.3.1.5 - Cross-Site Scripting
MEDIUMVERIFIEDby r3Y3r53
Shodan: title:"icewarp" || http.title:"gotify"
FOFA: title="gotify"

References (1)

Core 1
Core References

Scores

CVSS v3 6.1
EPSS 0.0201
EPSS Percentile 78.2%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (1)
icewarp/server 11.3.1.5
Published Aug 31, 2017
Tracked Since Feb 18, 2026