GS
Vendor
GFI Software
42
CVEs
0
On KEV
1
New 30D
Products
GA5.4
GFI Archiver
GFI Software
10 CVEs0 on KEV1 new
MA5.4
MailEssentials AI
GFI Software
18 CVEs0 on KEV0 new
HE5.4
HelpDesk
GFI Software
5 CVEs0 on KEV0 new
GC6.5
GFI ClearView
GFI Software
3 CVEs0 on KEV0 new
GE6.5
GFI Exinda AI
GFI Software
3 CVEs0 on KEV0 new
KC9.8
Kerio Control
GFI Software
3 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-112333 New | GA GFI Archiver GFI Software | 5.4 | Oct 23 | GFI Archiver < 15.14 Stored XSS via MailInsights.aspx |
| CVE-2026-74237 | GC GFI ClearView GFI Software | 6.5 | Sep 4 | GFI Exinda AI / ClearView < 7.6.5 Argument Injection via Tools Iperf Client |
| CVE-2026-74236 | GC GFI ClearView GFI Software | 6.5 | Sep 4 | GFI Exinda AI / ClearView < 7.6.5 Path Traversal via Diagnostic File Deletion Handler |
| CVE-2026-74235 | GE GFI Exinda AI GFI Software | 4.9 | Sep 4 | GFI Exinda AI / ClearView < 7.6.5 Path Traversal via Configuration Download Handler |
| CVE-2026-48539 | GA GFI Archiver GFI Software | 5.4 | Jul 23 | GFI Archiver < 15.14 Stored XSS via MailInsights.aspx |
| CVE-2026-48538 | GA GFI Archiver GFI Software | 5.4 | Jul 23 | GFI Archiver < 15.13 Stored XSS via ImportSettingsWizard.ashx |
| CVE-2026-48537 | GA GFI Archiver GFI Software | 5.4 | Jul 23 | GFI Archiver < 15.13 Stored XSS via FileArchiveAssistantWizard.aspx |
| CVE-2026-48536 | GA GFI Archiver GFI Software | 5.4 | Jul 23 | GFI Archiver < 15.13 Stored XSS via GeneralSettingsWizard.aspx |
| CVE-2026-48535 | GA GFI Archiver GFI Software | 5.4 | Jul 23 | GFI Archiver < 15.13 Stored XSS via CallHomeSettingsWizard.aspx |
| CVE-2026-48534 | GA GFI Archiver GFI Software | 5.4 | Jul 23 | GFI Archiver < 15.13 Stored XSS via ImapServerWizard.aspx |
| CVE-2026-48532 | GA GFI Archiver GFI Software | 5.4 | Jul 23 | GFI Archiver < 15.13 Stored XSS via FAARetentionPolicyWizard.aspx |
| CVE-2026-48531 | GA GFI Archiver GFI Software | 5.4 | Jul 23 | GFI Archiver < 15.13 Stored XSS via RetentionPolicyWizard.aspx |
| CVE-2026-48530 | GA GFI Archiver GFI Software | 5.4 | Jul 23 | GFI Archiver < 15.14 Stored XSS via CategorizationPolicyWizard.aspx |
| CVE-2026-23753 | HE HelpDesk GFI Software | 4.8 | Apr 20 | GFI HelpDesk < 4.99.9 Stored XSS via charset Parameter |
| CVE-2026-23752 | HE HelpDesk GFI Software | 4.8 | Apr 20 | GFI HelpDesk < 4.99.9 Stored XSS via companyname Parameter |
| CVE-2026-23756 | HE HelpDesk GFI Software | 5.4 | Apr 20 | GFI HelpDesk < 4.99.9 Stored XSS via Troubleshooter Step Subject |
| CVE-2026-23758 | HE HelpDesk GFI Software | 5.4 | Apr 20 | GFI HelpDesk < 4.99.9 Stored XSS via editsubject Parameter |
| CVE-2026-23757 | HE HelpDesk GFI Software | 5.4 | Apr 20 | GFI HelpDesk < 4.99.10 Stored XSS via Reports Module |
| CVE-2026-23621 | MA MailEssentials AI GFI Software | 4.3 | Feb 19 | GFI MailEssentials AI < 22.4 ListServer.IsPathExist() Absolute Directory Traversal to File Enumeration |
| CVE-2026-23620 | MA MailEssentials AI GFI Software | 4.3 | Feb 19 | GFI MailEssentials AI < 22.4 ListServer.IsDBExist() Absolute Directory Traversal to File Enumeration |
| CVE-2026-23619 | MA MailEssentials AI GFI Software | 5.4 | Feb 19 | GFI MailEssentials AI < 22.4 General Settings Local Domains Domain Description Stored XSS |
| CVE-2026-23618 | MA MailEssentials AI GFI Software | 5.4 | Feb 19 | GFI MailEssentials AI < 22.4 Anti-Spam Spam Keyword Checking Subject Condition Stored XSS |
| CVE-2026-23617 | MA MailEssentials AI GFI Software | 5.4 | Feb 19 | GFI MailEssentials AI < 22.4 Anti-Spam Spam Keyword Checking Body Condition Stored XSS |
| CVE-2026-23616 | MA MailEssentials AI GFI Software | 5.4 | Feb 19 | GFI MailEssentials AI < 22.4 Anti-Spam Anti-Spoofing Description Stored XSS |
| CVE-2026-23615 | MA MailEssentials AI GFI Software | 5.4 | Feb 19 | GFI MailEssentials AI < 22.4 Anti-Spam Sender Policy Framework Email Exceptions Description Stored XSS |
| CVE-2026-23614 | MA MailEssentials AI GFI Software | 5.4 | Feb 19 | GFI MailEssentials AI < 22.4 Anti-Spam Sender Policy Framework IP Exceptions Description Stored XSS |
| CVE-2026-23613 | MA MailEssentials AI GFI Software | 5.4 | Feb 19 | GFI MailEssentials AI < 22.4 Anti-Spam URI DNS Blocklist Domain Stored XSS |
| CVE-2026-23612 | MA MailEssentials AI GFI Software | 5.4 | Feb 19 | GFI MailEssentials AI < 22.4 Anti-Spam IP DNS Blocklist Domain Stored XSS |
| CVE-2026-23611 | MA MailEssentials AI GFI Software | 5.4 | Feb 19 | GFI MailEssentials AI < 22.4 Anti-Spam IP Blocklist Description Stored XSS |
| CVE-2026-23610 | MA MailEssentials AI GFI Software | 5.4 | Feb 19 | GFI MailEssentials AI < 22.4 POP2Exchange POP3 Server Login Stored XSS |
| CVE-2026-23609 | MA MailEssentials AI GFI Software | 5.4 | Feb 19 | GFI MailEssentials AI < 22.4 General Settings Perimeter SMTP Servers Description Stored XSS |
| CVE-2026-23608 | MA MailEssentials AI GFI Software | 5.4 | Feb 19 | GFI MailEssentials AI < 22.4 Email Management Mail Monitoring Rule Stored XSS |
| CVE-2026-23607 | MA MailEssentials AI GFI Software | 5.4 | Feb 19 | GFI MailEssentials AI < 22.4 Anti-Spam Whitelist Description Stored XSS |
| CVE-2026-23606 | MA MailEssentials AI GFI Software | 5.4 | Feb 19 | GFI MailEssentials AI < 22.4 Advanced Content Filtering Rule Stored XSS |
| CVE-2026-23605 | MA MailEssentials AI GFI Software | 5.4 | Feb 19 | GFI MailEssentials AI < 22.4 Attachment Filtering Rule Stored XSS |
| CVE-2026-23604 | MA MailEssentials AI GFI Software | 5.4 | Feb 19 | GFI MailEssentials AI < 22.4 Keyword Filtering Rule Stored XSS |
| CVE-2025-34071 | KC Kerio Control GFI Software | 9.8 | Jul 2 | GFI Kerio Control Unsigned System Image Upload Root Code Execution |
| CVE-2025-34070 | KC Kerio Control GFI Software | 9.8 | Jul 2 | GFI Kerio Control GFIAgent Missing Authentication on Administrative Interfaces |
| CVE-2025-34069 | KC Kerio Control GFI Software | 9.8 | Jul 2 | GFI Kerio Control GFIAgent Authentication Bypass via Proxy Forwarding |