Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: GFI MailEssentials — gfi.ai/products-and-solutions/network-security-solutions/ma… Clear all filters
TI-2025-24523 CVE-2025-34490 · GHSA-2vcm-447j-6j4j

GFI MailEssentials < 21.8 XXE Arbitrary File Read

Priority LOW 30

GFI MailEssentials prior to version 21.8 is vulnerable to an XML External Entity (XXE) issue.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00729 Published 2025-04-28 Fixed in 21.8 CWE-611
TI-2025-24522 CVE-2025-34489 · GHSA-6h6j-8576-v4xg

GFI MailEssentials < 21.8 Local Privilege Escalation

Priority HIGH 69

GFI MailEssentials prior to version 21.8 is vulnerable to a local privilege escalation issue.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00327 Published 2025-04-28 Fixed in 21.8 CWE-502