What’s Vulnerable › Products

GFI Software MailEssentials AI vulnerabilities

22 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 21 published in the last 12 months.

Check whether your GFI Software MailEssentials AI version is affected

Latest GFI Software MailEssentials AI vulnerabilities

• CVE-2026-23621 — GFI MailEssentials AI < 22.4 ListServer.IsPathExist() Absolute Directory Traversal to File Enumeration (CVSS 4.3)
• CVE-2026-23620 — GFI MailEssentials AI < 22.4 ListServer.IsDBExist() Absolute Directory Traversal to File Enumeration (CVSS 4.3)
• CVE-2026-23619 — GFI MailEssentials AI < 22.4 General Settings Local Domains Domain Description Stored XSS (CVSS 5.4)
• CVE-2026-23618 — GFI MailEssentials AI < 22.4 Anti-Spam Spam Keyword Checking Subject Condition Stored XSS (CVSS 5.4)
• CVE-2026-23617 — GFI MailEssentials AI < 22.4 Anti-Spam Spam Keyword Checking Body Condition Stored XSS (CVSS 5.4)
• CVE-2026-23616 — GFI MailEssentials AI < 22.4 Anti-Spam Anti-Spoofing Description Stored XSS (CVSS 5.4)
• CVE-2026-23615 — GFI MailEssentials AI < 22.4 Anti-Spam Sender Policy Framework Email Exceptions Description Stored XSS (CVSS 5.4)
• CVE-2026-23614 — GFI MailEssentials AI < 22.4 Anti-Spam Sender Policy Framework IP Exceptions Description Stored XSS (CVSS 5.4)
• CVE-2026-23613 — GFI MailEssentials AI < 22.4 Anti-Spam URI DNS Blocklist Domain Stored XSS (CVSS 5.4)
• CVE-2026-23612 — GFI MailEssentials AI < 22.4 Anti-Spam IP DNS Blocklist Domain Stored XSS (CVSS 5.4)
• CVE-2026-23611 — GFI MailEssentials AI < 22.4 Anti-Spam IP Blocklist Description Stored XSS (CVSS 5.4)
• CVE-2026-23610 — GFI MailEssentials AI < 22.4 POP2Exchange POP3 Server Login Stored XSS (CVSS 5.4)
• CVE-2026-23609 — GFI MailEssentials AI < 22.4 General Settings Perimeter SMTP Servers Description Stored XSS (CVSS 5.4)
• CVE-2026-23608 — GFI MailEssentials AI < 22.4 Email Management Mail Monitoring Rule Stored XSS (CVSS 5.4)
• CVE-2026-23607 — GFI MailEssentials AI < 22.4 Anti-Spam Whitelist Description Stored XSS (CVSS 5.4)
• CVE-2026-23606 — GFI MailEssentials AI < 22.4 Advanced Content Filtering Rule Stored XSS (CVSS 5.4)
• CVE-2026-23605 — GFI MailEssentials AI < 22.4 Attachment Filtering Rule Stored XSS (CVSS 5.4)
• CVE-2026-23604 — GFI MailEssentials AI < 22.4 Keyword Filtering Rule Stored XSS (CVSS 5.4)
• CVE-2025-34491 — GFI MailEssentials < 21.8 MultiNode Insecure Deserialization (CVSS 8.8)
• CVE-2025-34490 — GFI MailEssentials < 21.8 XXE Arbitrary File Read (CVSS 6.5)
• CVE-2025-34489 — GFI MailEssentials < 21.8 Local Privilege Escalation (CVSS 7.8)
• CVE-2004-1312 — (CVSS 10.0)