Vulnerabilities in A.K.I Software

4 results

Vexday analysis

A.K.I Software apresenta um perfil de risco baixo com apenas 4 CVEs registradas e nenhuma sob exploração ativa. Não há vulnerabilidades críticas na base, e o histórico recente (últimos 90 dias) está vazio, indicando risco estabilizado. A fraqueza predominante é path traversal (CWE-22), um vetor clássico que, neste volume reduzido, não representa ameaça imediata.

CVE-2023-40747HIGHDirectory traversal vulnerability exists in A.K.I Software's PMailServer/PMailServer2 products' CGIs included in Internal Simple Webserver. EPSS 1.3%CVE-2023-40160LOWDirectory traversal vulnerability exists in Mailing List Search CGI (pmmls.exe) included in A.K.I Software's PMailServer/PMailServer2 producEPSS 1.0%CVE-2023-39933MEDIUMInsufficient verification vulnerability exists in Broadcast Mail CGI (pmc.exe) included in A.K.I Software's PMailServer/PMailServer2 productEPSS 0.4%CVE-2023-39223MEDIUMStored cross-site scripting vulnerability exists in CGIs included in A.K.I Software's PMailServer/PMailServer2 products. If this vulnerabiliEPSS 0.3%