VendorsGFImailessentialsany version
Vulnerabilities

GFI MailEssentials any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

21CVEs
CVE-2025-34491
GFI MailEssentials < 21.8 MultiNode Insecure Deserialization
Published 2025-04-28 · Modified
8.8EPSS 0.009
CVE-2025-34489
GFI MailEssentials < 21.8 Local Privilege Escalation
Published 2025-04-28 · Modified
7.8EPSS 0.003
CVE-2025-34490
GFI MailEssentials < 21.8 XXE Arbitrary File Read
Published 2025-04-28 · Modified
6.5EPSS 0.007
CVE-2026-23611
GFI MailEssentials AI < 22.4 Anti-Spam IP Blocklist Description Stored XSS
Published 2026-02-19 · Analyzed
5.4EPSS 0.002
CVE-2026-23619
GFI MailEssentials AI < 22.4 General Settings Local Domains Domain Description Stored XSS
Published 2026-02-19 · Analyzed
5.4EPSS 0.002
CVE-2026-23618
GFI MailEssentials AI < 22.4 Anti-Spam Spam Keyword Checking Subject Condition Stored XSS
Published 2026-02-19 · Analyzed
5.4EPSS 0.002
CVE-2026-23617
GFI MailEssentials AI < 22.4 Anti-Spam Spam Keyword Checking Body Condition Stored XSS
Published 2026-02-19 · Analyzed
5.4EPSS 0.002
CVE-2026-23616
GFI MailEssentials AI < 22.4 Anti-Spam Anti-Spoofing Description Stored XSS
Published 2026-02-19 · Analyzed
5.4EPSS 0.002
CVE-2026-23614
GFI MailEssentials AI < 22.4 Anti-Spam Sender Policy Framework IP Exceptions Description Stored XSS
Published 2026-02-19 · Analyzed
5.4EPSS 0.002
CVE-2026-23612
GFI MailEssentials AI < 22.4 Anti-Spam IP DNS Blocklist Domain Stored XSS
Published 2026-02-19 · Analyzed
5.4EPSS 0.002
CVE-2026-23610
GFI MailEssentials AI < 22.4 POP2Exchange POP3 Server Login Stored XSS
Published 2026-02-19 · Analyzed
5.4EPSS 0.002
CVE-2026-23609
GFI MailEssentials AI < 22.4 General Settings Perimeter SMTP Servers Description Stored XSS
Published 2026-02-19 · Analyzed
5.4EPSS 0.002
CVE-2026-23608
GFI MailEssentials AI < 22.4 Email Management Mail Monitoring Rule Stored XSS
Published 2026-02-19 · Analyzed
5.4EPSS 0.002
CVE-2026-23607
GFI MailEssentials AI < 22.4 Anti-Spam Whitelist Description Stored XSS
Published 2026-02-19 · Analyzed
5.4EPSS 0.002
CVE-2026-23606
GFI MailEssentials AI < 22.4 Advanced Content Filtering Rule Stored XSS
Published 2026-02-19 · Analyzed
5.4EPSS 0.002
CVE-2026-23605
GFI MailEssentials AI < 22.4 Attachment Filtering Rule Stored XSS
Published 2026-02-19 · Analyzed
5.4EPSS 0.002
CVE-2026-23604
GFI MailEssentials AI < 22.4 Keyword Filtering Rule Stored XSS
Published 2026-02-19 · Analyzed
5.4EPSS 0.002
CVE-2026-23613
GFI MailEssentials AI < 22.4 Anti-Spam URI DNS Blocklist Domain Stored XSS
Published 2026-02-19 · Analyzed
5.4EPSS 0.002
CVE-2026-23615
GFI MailEssentials AI < 22.4 Anti-Spam Sender Policy Framework Email Exceptions Description Stored XSS
Published 2026-02-19 · Analyzed
5.4EPSS 0.002
CVE-2026-23621
GFI MailEssentials AI < 22.4 ListServer.IsPathExist() Absolute Directory Traversal to File Enumeration
Published 2026-02-19 · Analyzed
5.3EPSS 0.003
CVE-2026-23620
GFI MailEssentials AI < 22.4 ListServer.IsDBExist() Absolute Directory Traversal to File Enumeration
Published 2026-02-19 · Analyzed
5.3EPSS 0.002