GFI Software vulnerabilities
39 CVEs and advisories name GFI Software as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-112333GFI Archiver < 15.14 Stored XSS via MailInsights.aspx
- CVE-2026-74237GFI Exinda AI / ClearView < 7.6.5 Argument Injection via Tools Iperf Client
- CVE-2026-74236GFI Exinda AI / ClearView < 7.6.5 Path Traversal via Diagnostic File Deletion Handler
- CVE-2026-74235GFI Exinda AI / ClearView < 7.6.5 Path Traversal via Configuration Download Handler
- CVE-2026-48539GFI Archiver < 15.14 Stored XSS via MailInsights.aspx
- CVE-2026-48538GFI Archiver < 15.13 Stored XSS via ImportSettingsWizard.ashx
- CVE-2026-48537GFI Archiver < 15.13 Stored XSS via FileArchiveAssistantWizard.aspx
- CVE-2026-48536GFI Archiver < 15.13 Stored XSS via GeneralSettingsWizard.aspx
- CVE-2026-48535GFI Archiver < 15.13 Stored XSS via CallHomeSettingsWizard.aspx
- CVE-2026-48534GFI Archiver < 15.13 Stored XSS via ImapServerWizard.aspx
- CVE-2026-48532GFI Archiver < 15.13 Stored XSS via FAARetentionPolicyWizard.aspx
- CVE-2026-48531GFI Archiver < 15.13 Stored XSS via RetentionPolicyWizard.aspx
- CVE-2026-48530GFI Archiver < 15.14 Stored XSS via CategorizationPolicyWizard.aspx
- CVE-2026-23753GFI HelpDesk < 4.99.9 Stored XSS via charset Parameter
- CVE-2026-23752GFI HelpDesk < 4.99.9 Stored XSS via companyname Parameter
- CVE-2026-23756GFI HelpDesk < 4.99.9 Stored XSS via Troubleshooter Step Subject
- CVE-2026-23758GFI HelpDesk < 4.99.9 Stored XSS via editsubject Parameter
- CVE-2026-23757GFI HelpDesk < 4.99.10 Stored XSS via Reports Module
- CVE-2026-23621GFI MailEssentials AI < 22.4 ListServer.IsPathExist() Absolute Directory Traversal to File Enumeration
- CVE-2026-23620GFI MailEssentials AI < 22.4 ListServer.IsDBExist() Absolute Directory Traversal to File Enumeration
- CVE-2026-23619GFI MailEssentials AI < 22.4 General Settings Local Domains Domain Description Stored XSS
- CVE-2026-23618GFI MailEssentials AI < 22.4 Anti-Spam Spam Keyword Checking Subject Condition Stored XSS
- CVE-2026-23617GFI MailEssentials AI < 22.4 Anti-Spam Spam Keyword Checking Body Condition Stored XSS
- CVE-2026-23616GFI MailEssentials AI < 22.4 Anti-Spam Anti-Spoofing Description Stored XSS
- CVE-2026-23615GFI MailEssentials AI < 22.4 Anti-Spam Sender Policy Framework Email Exceptions Description Stored XSS
- CVE-2026-23614GFI MailEssentials AI < 22.4 Anti-Spam Sender Policy Framework IP Exceptions Description Stored XSS
- CVE-2026-23613GFI MailEssentials AI < 22.4 Anti-Spam URI DNS Blocklist Domain Stored XSS
- CVE-2026-23612GFI MailEssentials AI < 22.4 Anti-Spam IP DNS Blocklist Domain Stored XSS
- CVE-2026-23611GFI MailEssentials AI < 22.4 Anti-Spam IP Blocklist Description Stored XSS
- CVE-2026-23610GFI MailEssentials AI < 22.4 POP2Exchange POP3 Server Login Stored XSS