CVE-2015-1503

Multiple directory traversal vulnerabilities in IceWarp Mail Server before 11.2 allow remote attackers to read arbitrary files via a (1) .

published May 8, 2018

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.1th percentile for exploit probability.

CVSS
—
EPSS
57%
Percentile
99.1
In the wild
Unconfirmed
What it is

Multiple directory traversal vulnerabilities in IceWarp Mail Server before 11.2 allow remote attackers to read arbitrary files via a (1) .. (dot dot) in the file parameter to a webmail/client/skins/default/css/css.php page or .../. (dot dot dot slash dot) in the (2) script or (3) style parameter to webmail/old/calendar/minimizer/index.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.57007 · 99.1th percentile
Published
2018-05-08T20:00Z
EPSS history
Timeline
  • 22 SEP 03:11Z
    EPSS moved 58% → 31%
    epss
  • 06 SEP 03:08Z
    EPSS moved 58% → 31%
    epss
  • 30 AUG 15:29Z
    EPSS moved 31% → 58%
    epss
  • 29 AUG 04:01Z
    EPSS moved 58% → 31%
    epss
  • 08 MAY 20:00Z
    Multiple directory traversal vulnerabilities in IceWarp Mail Server before 11.2 allow remote attackers to read arbitrary files via a (1) .
    cvelistv5