MA
Product
Mailessentials
22
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 19Low 0
Watch
Add Mailessentials to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-34491 | 8.8 | Apr 28 | GFI MailEssentials prior to version 21.8 is vulnerable to a .NET deserialization issue Affected: before 21.8 |
| CVE-2025-34489 | 7.8 | Apr 28 | GFI MailEssentials prior to version 21.8 is vulnerable to a local privilege escalation issue Affected: before 21.8 |
| CVE-2025-34490 | 6.5 | Apr 28 | GFI MailEssentials prior to version 21.8 is vulnerable to an XML External Entity (XXE) issue Affected: before 21.8 |
| CVE-2026-23619 | 5.4 | Feb 19 | GFI MailEssentials AI < 22.4 General Settings Local Domains Domain Description Stored XSS Affected: before 22.4 |
| CVE-2026-23618 | 5.4 | Feb 19 | GFI MailEssentials AI < 22.4 Anti-Spam Spam Keyword Checking Subject Condition Stored XSS Affected: before 22.4 |
| CVE-2026-23617 | 5.4 | Feb 19 | GFI MailEssentials AI < 22.4 Anti-Spam Spam Keyword Checking Body Condition Stored XSS Affected: before 22.4 |
| CVE-2026-23616 | 5.4 | Feb 19 | GFI MailEssentials AI < 22.4 Anti-Spam Anti-Spoofing Description Stored XSS Affected: before 22.4 |
| CVE-2026-23615 | 5.4 | Feb 19 | GFI MailEssentials AI < 22.4 Anti-Spam Sender Policy Framework Email Exceptions Description Stored XSS Affected: before 22.4 |
| CVE-2026-23614 | 5.4 | Feb 19 | GFI MailEssentials AI < 22.4 Anti-Spam Sender Policy Framework IP Exceptions Description Stored XSS Affected: before 22.4 |
| CVE-2026-23613 | 5.4 | Feb 19 | GFI MailEssentials AI < 22.4 Anti-Spam URI DNS Blocklist Domain Stored XSS Affected: before 22.4 |
| CVE-2026-23612 | 5.4 | Feb 19 | GFI MailEssentials AI < 22.4 Anti-Spam IP DNS Blocklist Domain Stored XSS Affected: before 22.4 |
| CVE-2026-23611 | 5.4 | Feb 19 | GFI MailEssentials AI < 22.4 Anti-Spam IP Blocklist Description Stored XSS Affected: before 22.4 |
| CVE-2026-23610 | 5.4 | Feb 19 | GFI MailEssentials AI < 22.4 POP2Exchange POP3 Server Login Stored XSS Affected: before 22.4 |
| CVE-2026-23609 | 5.4 | Feb 19 | GFI MailEssentials AI < 22.4 General Settings Perimeter SMTP Servers Description Stored XSS Affected: before 22.4 |
| CVE-2026-23608 | 5.4 | Feb 19 | GFI MailEssentials AI < 22.4 Email Management Mail Monitoring Rule Stored XSS Affected: before 22.4 |
| CVE-2026-23607 | 5.4 | Feb 19 | GFI MailEssentials AI < 22.4 Anti-Spam Whitelist Description Stored XSS Affected: before 22.4 |
| CVE-2026-23606 | 5.4 | Feb 19 | GFI MailEssentials AI < 22.4 Advanced Content Filtering Rule Stored XSS Affected: before 22.4 |
| CVE-2026-23605 | 5.4 | Feb 19 | GFI MailEssentials AI < 22.4 Attachment Filtering Rule Stored XSS Affected: before 22.4 |
| CVE-2026-23604 | 5.4 | Feb 19 | GFI MailEssentials AI < 22.4 Keyword Filtering Rule Stored XSS Affected: before 22.4 |
| CVE-2026-23621 | 4.3 | Feb 19 | GFI MailEssentials AI < 22.4 ListServer.IsPathExist() Absolute Directory Traversal to File Enumeration Affected: before 22.4 |
| CVE-2026-23620 | 4.3 | Feb 19 | GFI MailEssentials AI < 22.4 ListServer.IsDBExist() Absolute Directory Traversal to File Enumeration Affected: before 22.4 |
| CVE-2004-1312 | – | Jan 3 | A bug in the HTML parser in a certain Microsoft HTML library, as used in various third party products, may allow remote attackers to cause a denial of service via certain strings,… Affected: 9.0; 10.0; 10.1 |
Showing 22