Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Release: GFI Archiver 15.13 Clear all filters
TI-2026-35897 CVE-2026-48538 · GHSA-746j-5264-mj4g

GFI Archiver < 15.13 Stored XSS via ImportSettingsWizard.ashx

Priority LOW 23

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the default import settings configuration that allows authenticated attackers to inject arbitrary web script or HTML via the configured fo…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00235 Published 2026-07-23 Fixed in 15.13 CWE-79
TI-2026-35896 CVE-2026-48537 · GHSA-4448-cm9w-pfq8

GFI Archiver < 15.13 Stored XSS via FileArchiveAssistantWizard.aspx

Priority LOW 23

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the File Archive Assistant configuration that allows authenticated attackers to inject arbitrary web script or HTML via the excluded exten…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00235 Published 2026-07-23 Fixed in 15.13 CWE-79
TI-2026-35895 CVE-2026-48536 · GHSA-3hhj-3rqm-6fp9

GFI Archiver < 15.13 Stored XSS via GeneralSettingsWizard.aspx

Priority LOW 23

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the General Settings SMTP configuration that allows authenticated attackers to inject arbitrary web script or HTML via the SMTP server add…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00235 Published 2026-07-23 Fixed in 15.13 CWE-79
TI-2026-35894 CVE-2026-48535 · GHSA-pwg9-3f2x-q22x

GFI Archiver < 15.13 Stored XSS via CallHomeSettingsWizard.aspx

Priority LOW 23

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the Call Home proxy server configuration that allows authenticated attackers to inject arbitrary web script or HTML via the proxy server a…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00235 Published 2026-07-23 Fixed in 15.13 CWE-79
TI-2026-35893 CVE-2026-48534 · GHSA-pqjc-327p-9x24

GFI Archiver < 15.13 Stored XSS via ImapServerWizard.aspx

Priority LOW 23

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the IMAP Server configuration that allows authenticated attackers to inject arbitrary web script or HTML via the server URL parameter to /…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00235 Published 2026-07-23 Fixed in 15.13 CWE-79
TI-2026-35892 CVE-2026-48532 · GHSA-c6r4-5qxc-q87c

GFI Archiver < 15.13 Stored XSS via FAARetentionPolicyWizard.aspx

Priority LOW 23

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the File History Retention Policy configuration that allows authenticated attackers to inject arbitrary web script or HTML via the policy…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00235 Published 2026-07-23 Fixed in 15.13 CWE-79
TI-2026-35891 CVE-2026-48531 · GHSA-224c-7qmf-qhq6

GFI Archiver < 15.13 Stored XSS via RetentionPolicyWizard.aspx

Priority LOW 23

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the Retention Policy configuration that allows authenticated attackers to inject arbitrary web script or HTML via the policy name paramete…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00235 Published 2026-07-23 Fixed in 15.13 CWE-79