Vulnerability Database

309,364

Total vulnerabilities in the database

CVE-2025-40632

Cross-site scripting (XSS) in Icewarp Mail Server affecting version 11.4.0. This vulnerability allows an attacker to modify the “lastLogin” cookie with malicious JavaScript code that will be executed when the page is rendered.

  • Published: May 16, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2025-40632
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.1
  • AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
icewarp / mail_server 11.4.0 11.4.0.x