A.K.I Software

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

A.K.I Software records in CISA KEV

No A.K.I Software vulnerabilities are listed in CISA KEV.

4 records

TI-2023-21519 CVE-2023-40747 · GHSA-vgqq-j658-qpcx

MEDIUM 41

Directory traversal vulnerability exists in A.K.I Software's PMailServer/PMailServer2 products' CGIs included in Internal Simple Webserver.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01293 Published 2024-03-18 No fix listed CWE-22

TI-2023-20380 CVE-2023-39223 · GHSA-3f88-vcg8-m5ph

LOW 24

Stored cross-site scripting vulnerability exists in CGIs included in A.K.I Software's PMailServer/PMailServer2 products.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00343 Published 2024-03-18 No fix listed CWE-79

TI-2023-21035 CVE-2023-40160 · GHSA-27v4-w7r4-68vg

LOW 20

Directory traversal vulnerability exists in Mailing List Search CGI (pmmls.exe) included in A.K.I Software's PMailServer/PMailServer2 products.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00992 Published 2024-03-18 No fix listed CWE-22

TI-2023-20830 CVE-2023-39933 · GHSA-qgvx-mvf3-xw8r

LOW 20

Insufficient verification vulnerability exists in Broadcast Mail CGI (pmc.exe) included in A.K.I Software's PMailServer/PMailServer2 products.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00448 Published 2024-03-18 No fix listed CWE-434