Product by GFI
GFI Software MailEssentials AI
22 known vulnerabilities in GFI Software MailEssentials AI (GFI), 0 of them actively exploited (CISA KEV).
Key figures
22
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2025-34491 | GFI MailEssentials < 21.8 MultiNode Insecure Deserialization | 8.8 | |
| Medium | CVE-2025-34490 | GFI MailEssentials < 21.8 XXE Arbitrary File Read | 6.5 | |
| Not rated | CVE-2004-1312 | GFI MailEssentials: Denial of Service | — | |
| High | CVE-2025-34489 | GFI MailEssentials < 21.8 Local Privilege Escalation | 7.8 | |
| Medium | CVE-2026-23621 | GFI Software MailEssentials AI: Observable Discrepancy | 4.3 | |
| Medium | CVE-2026-23614 | GFI MailEssentials AI < 22.4 Anti-Spam Sender Policy Framework IP Exceptions Description Stored XSS | 5.4 | |
| Medium | CVE-2026-23612 | GFI MailEssentials AI < 22.4 Anti-Spam IP DNS Blocklist Domain Stored XSS | 5.4 | |
| Medium | CVE-2026-23610 | GFI MailEssentials AI < 22.4 POP2Exchange POP3 Server Login Stored XSS | 5.4 | |
| Medium | CVE-2026-23605 | GFI MailEssentials AI < 22.4 Attachment Filtering Rule Stored XSS | 5.4 | |
| Medium | CVE-2026-23619 | GFI MailEssentials AI < 22.4 General Settings Local Domains Domain Description Stored XSS | 5.4 | |
| Medium | CVE-2026-23618 | GFI MailEssentials AI < 22.4 Anti-Spam Spam Keyword Checking Subject Condition Stored XSS | 5.4 | |
| Medium | CVE-2026-23611 | GFI MailEssentials AI < 22.4 Anti-Spam IP Blocklist Description Stored XSS | 5.4 | |
| Medium | CVE-2026-23607 | GFI MailEssentials AI < 22.4 Anti-Spam Whitelist Description Stored XSS | 5.4 | |
| Medium | CVE-2026-23616 | GFI MailEssentials AI < 22.4 Anti-Spam Anti-Spoofing Description Stored XSS | 5.4 | |
| Medium | CVE-2026-23608 | GFI MailEssentials AI < 22.4 Email Management Mail Monitoring Rule Stored XSS | 5.4 | |
| Medium | CVE-2026-23606 | GFI MailEssentials AI < 22.4 Advanced Content Filtering Rule Stored XSS | 5.4 | |
| Medium | CVE-2026-23604 | GFI MailEssentials AI < 22.4 Keyword Filtering Rule Stored XSS | 5.4 | |
| Medium | CVE-2026-23617 | GFI MailEssentials AI < 22.4 Anti-Spam Spam Keyword Checking Body Condition Stored XSS | 5.4 | |
| Medium | CVE-2026-23609 | GFI MailEssentials AI < 22.4 General Settings Perimeter SMTP Servers Description Stored XSS | 5.4 | |
| Medium | CVE-2026-23615 | GFI Software MailEssentials AI: Cross-site Scripting | 5.4 | |
| Medium | CVE-2026-23613 | GFI MailEssentials AI < 22.4 Anti-Spam URI DNS Blocklist Domain Stored XSS | 5.4 | |
| Medium | CVE-2026-23620 | GFI MailEssentials AI < 22.4 ListServer.IsDBExist() Absolute Directory Traversal to File Enumeration | 4.3 |