Gfi Software vulnerabilities

Products

• Helpdesk 18
• Mailessentials Ai 18
• Archiver 10
• Kerio Control 4
• Clearview 3
• Exinda Ai 3

Newest

• gfi software archiver GFI Archiver < 15.14 Stored XSS via MailInsights.aspx CVE-2026-112333 5.1 MediumOctober 23, 2026
• frappe helpdesk Frappe Helpdesk before 1.26.0 Authorization Bypass via raised_by in Ticket Creation CVE-2026-111939 5.1 MediumOctober 19, 2026
• gfi software clearview, exinda ai +1 more GFI Exinda AI / ClearView < 7.6.5 Argument Injection via Tools Iperf Client CVE-2026-74237 7.1 HighSeptember 4, 2026
• gfi software clearview, exinda ai +1 more GFI Exinda AI / ClearView < 7.6.5 Path Traversal via Diagnostic File Deletion Handler CVE-2026-74236 7.0 HighSeptember 4, 2026
• gfi software clearview, exinda ai +1 more GFI Exinda AI / ClearView < 7.6.5 Path Traversal via Configuration Download Handler CVE-2026-74235 6.9 MediumSeptember 4, 2026
• faveo helpdesk Faveo Helpdesk Logo SettingsController.php unlink path traversal CVE-2026-78435 5.1 MediumAugust 24, 2026
• faveo helpdesk Faveo Helpdesk post-ticket-reply Endpoint FormController.php post_ticket_reply missing authentication CVE-2026-78434 6.9 MediumAugust 24, 2026
• gfi software archiver GFI Archiver < 15.14 Stored XSS via MailInsights.aspx CVE-2026-48539 5.1 MediumJuly 23, 2026
• gfi software archiver GFI Archiver < 15.13 Stored XSS via ImportSettingsWizard.ashx CVE-2026-48538 5.1 MediumJuly 23, 2026
• gfi software archiver GFI Archiver < 15.13 Stored XSS via FileArchiveAssistantWizard.aspx CVE-2026-48537 5.1 MediumJuly 23, 2026
• gfi software archiver GFI Archiver < 15.13 Stored XSS via GeneralSettingsWizard.aspx CVE-2026-48536 5.1 MediumJuly 23, 2026
• gfi software archiver GFI Archiver < 15.13 Stored XSS via CallHomeSettingsWizard.aspx CVE-2026-48535 5.1 MediumJuly 23, 2026
• gfi software archiver GFI Archiver < 15.13 Stored XSS via ImapServerWizard.aspx CVE-2026-48534 5.1 MediumJuly 23, 2026
• gfi software archiver GFI Archiver < 15.13 Stored XSS via FAARetentionPolicyWizard.aspx CVE-2026-48532 5.1 MediumJuly 23, 2026
• gfi software archiver GFI Archiver < 15.13 Stored XSS via RetentionPolicyWizard.aspx CVE-2026-48531 5.1 MediumJuly 23, 2026
• gfi software archiver GFI Archiver < 15.14 Stored XSS via CategorizationPolicyWizard.aspx CVE-2026-48530 5.1 MediumJuly 23, 2026
• gfi helpdesk GFI HelpDesk < 4.99.9 Stored XSS via charset Parameter CVE-2026-23753 4.8 MediumApril 20, 2026
• gfi helpdesk GFI HelpDesk < 4.99.9 Stored XSS via companyname Parameter CVE-2026-23752 4.8 MediumApril 20, 2026
• gfi helpdesk GFI HelpDesk < 4.99.9 Stored XSS via Troubleshooter Step Subject CVE-2026-23756 5.1 MediumApril 20, 2026
• gfi helpdesk GFI HelpDesk < 4.99.9 Stored XSS via editsubject Parameter CVE-2026-23758 5.1 MediumApril 20, 2026
• gfi helpdesk GFI HelpDesk < 4.99.10 Stored XSS via Reports Module CVE-2026-23757 5.1 MediumApril 20, 2026
• gfi software helpdesk Vision Helpdesk before 5.7.0 (patched in 5.6.10) allows attackers to read user profiles via... CVE-2024-58343 4.3 MediumApril 16, 2026
• gfi mailessentials, gfi software mailessentials ai +1 more GFI MailEssentials AI < 22.4 ListServer.IsPathExist() Absolute Directory Traversal to File Enumeration CVE-2026-23621 5.3 MediumFebruary 19, 2026
• gfi mailessentials, gfi software mailessentials ai +1 more GFI MailEssentials AI < 22.4 ListServer.IsDBExist() Absolute Directory Traversal to File Enumeration CVE-2026-23620 5.3 MediumFebruary 19, 2026
• gfi mailessentials, gfi software mailessentials ai +1 more GFI MailEssentials AI < 22.4 General Settings Local Domains Domain Description Stored XSS CVE-2026-23619 5.1 MediumFebruary 19, 2026
• gfi mailessentials, gfi software mailessentials ai +1 more GFI MailEssentials AI < 22.4 Anti-Spam Spam Keyword Checking Subject Condition Stored XSS CVE-2026-23618 5.1 MediumFebruary 19, 2026
• gfi mailessentials, gfi software mailessentials ai +1 more GFI MailEssentials AI < 22.4 Anti-Spam Spam Keyword Checking Body Condition Stored XSS CVE-2026-23617 5.1 MediumFebruary 19, 2026
• gfi mailessentials, gfi software mailessentials ai +1 more GFI MailEssentials AI < 22.4 Anti-Spam Anti-Spoofing Description Stored XSS CVE-2026-23616 5.1 MediumFebruary 19, 2026
• gfi mailessentials, gfi software mailessentials ai +1 more GFI MailEssentials AI < 22.4 Anti-Spam Sender Policy Framework Email Exceptions Description Stored XSS CVE-2026-23615 5.1 MediumFebruary 19, 2026
• gfi mailessentials, gfi software mailessentials ai +1 more GFI MailEssentials AI < 22.4 Anti-Spam Sender Policy Framework IP Exceptions Description Stored XSS CVE-2026-23614 5.1 MediumFebruary 19, 2026
• gfi mailessentials, gfi software mailessentials ai +1 more GFI MailEssentials AI < 22.4 Anti-Spam URI DNS Blocklist Domain Stored XSS CVE-2026-23613 5.1 MediumFebruary 19, 2026
• gfi mailessentials, gfi software mailessentials ai +1 more GFI MailEssentials AI < 22.4 Anti-Spam IP DNS Blocklist Domain Stored XSS CVE-2026-23612 5.1 MediumFebruary 19, 2026
• gfi mailessentials, gfi software mailessentials ai +1 more GFI MailEssentials AI < 22.4 Anti-Spam IP Blocklist Description Stored XSS CVE-2026-23611 5.1 MediumFebruary 19, 2026
• gfi mailessentials, gfi software mailessentials ai +1 more GFI MailEssentials AI < 22.4 POP2Exchange POP3 Server Login Stored XSS CVE-2026-23610 5.1 MediumFebruary 19, 2026
• gfi mailessentials, gfi software mailessentials ai +1 more GFI MailEssentials AI < 22.4 General Settings Perimeter SMTP Servers Description Stored XSS CVE-2026-23609 5.1 MediumFebruary 19, 2026
• gfi mailessentials, gfi software mailessentials ai +1 more GFI MailEssentials AI < 22.4 Email Management Mail Monitoring Rule Stored XSS CVE-2026-23608 5.1 MediumFebruary 19, 2026
• gfi mailessentials, gfi software mailessentials ai +1 more GFI MailEssentials AI < 22.4 Anti-Spam Whitelist Description Stored XSS CVE-2026-23607 5.1 MediumFebruary 19, 2026
• gfi mailessentials, gfi software mailessentials ai +1 more GFI MailEssentials AI < 22.4 Advanced Content Filtering Rule Stored XSS CVE-2026-23606 5.1 MediumFebruary 19, 2026
• gfi mailessentials, gfi software mailessentials ai +1 more GFI MailEssentials AI < 22.4 Attachment Filtering Rule Stored XSS CVE-2026-23605 5.1 MediumFebruary 19, 2026
• gfi mailessentials, gfi software mailessentials ai +1 more GFI MailEssentials AI < 22.4 Keyword Filtering Rule Stored XSS CVE-2026-23604 5.1 MediumFebruary 19, 2026
• gfi kerio control GFI Kerio Control Unsigned System Image Upload Root Code Execution CVE-2025-34071 Public exploit 9.4 CriticalJuly 2, 2025
• gfi kerio control GFI Kerio Control GFIAgent Missing Authentication on Administrative Interfaces CVE-2025-34070 10.0 CriticalJuly 2, 2025
• gfi kerio control GFI Kerio Control GFIAgent Authentication Bypass via Proxy Forwarding CVE-2025-34069 Public exploit 9.5 CriticalJuly 2, 2025
• gfi software helpdesk Helpdesk CVE-2024-50394 7.7 HighMarch 7, 2025
• gfi kerio control An issue was discovered in GFI Kerio Control 9.2.5 through 9.4.5. The dest GET parameter passed... CVE-2024-52875 EPSS 29.4% 8.8 HighJanuary 31, 2025
• gfi software helpdesk Helpdesk CVE-2024-27125 3.5 LowSeptember 6, 2024
• gfi software helpdesk Improper Access Control Vulnerability in Helpdesk CVE-2021-28814 8.8 HighJune 11, 2021
• gfi software helpdesk improper access control vulnerability in Helpdesk CVE-2020-2506 In KEV 7.3 HighFebruary 3, 2021
• gfi software helpdesk command injection vulnerability in Helpdesk CVE-2020-2507 9.8 CriticalFebruary 3, 2021
• gfi software helpdesk The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this... CVE-2018-19946 4.2 MediumSeptember 11, 2020
• Show olderLoading…