Vulnerabilities in GFI Software

38 results
Vexday analysis

A GFI Software apresenta 26 vulnerabilidades catalogadas, das quais 3 são críticas, mas nenhuma está sob ataque ativo no momento. O risco mais relevante é a prevalência de falhas de validação de entrada (CWE-79, XSS), padrão histórico que não mostra sinais de evolução recente, já que não houve publicações nos últimos 90 dias. O cenário atual sugere um fornecedor com vulnerabilidades conhecidas, mas sem pressão imediata de exploração em massa.

CVE-2025-34071CRITICALGFI Kerio Control Unsigned System Image Upload Root Code ExecutionEPSS 0.8%CVE-2025-34070CRITICALGFI Kerio Control GFIAgent Missing Authentication on Administrative InterfacesEPSS 0.7%CVE-2025-34069CRITICALGFI Kerio Control GFIAgent Authentication Bypass via Proxy ForwardingEPSS 0.7%CVE-2026-74236HIGHGFI Exinda AI / ClearView < 7.6.5 Path Traversal via Diagnostic File Deletion HandlerEPSS 0.6%CVE-2026-74235MEDIUMGFI Exinda AI / ClearView < 7.6.5 Path Traversal via Configuration Download HandlerEPSS 0.6%CVE-2026-23621MEDIUMGFI MailEssentials AI < 22.4 ListServer.IsPathExist() Absolute Directory Traversal to File EnumerationEPSS 0.3%CVE-2026-48535MEDIUMGFI Archiver < 15.13 Stored XSS via CallHomeSettingsWizard.aspxEPSS 0.2%CVE-2026-48536MEDIUMGFI Archiver < 15.13 Stored XSS via GeneralSettingsWizard.aspxEPSS 0.2%CVE-2026-48539MEDIUMGFI Archiver < 15.13 Stored XSS via MailInsights.aspxEPSS 0.2%CVE-2026-48534MEDIUMGFI Archiver < 15.13 Stored XSS via ImapServerWizard.aspxEPSS 0.2%CVE-2026-48537MEDIUMGFI Archiver < 15.13 Stored XSS via FileArchiveAssistantWizard.aspxEPSS 0.2%CVE-2026-48538MEDIUMGFI Archiver < 15.13 Stored XSS via ImportSettingsWizard.ashxEPSS 0.2%CVE-2026-48531MEDIUMGFI Archiver < 15.13 Stored XSS via RetentionPolicyWizard.aspxEPSS 0.2%CVE-2026-48532MEDIUMGFI Archiver < 15.13 Stored XSS via FAARetentionPolicyWizard.aspxEPSS 0.2%CVE-2026-48530MEDIUMGFI Archiver < 15.13 Stored XSS via CategorizationPolicyWizard.aspxEPSS 0.2%CVE-2026-74237HIGHGFI Exinda AI / ClearView < 7.6.5 Argument Injection via Tools Iperf ClientEPSS 0.2%CVE-2026-23620MEDIUMGFI MailEssentials AI < 22.4 ListServer.IsDBExist() Absolute Directory Traversal to File EnumerationEPSS 0.2%CVE-2026-23617MEDIUMGFI MailEssentials AI < 22.4 Anti-Spam Spam Keyword Checking Body Condition Stored XSSEPSS 0.2%CVE-2026-23609MEDIUMGFI MailEssentials AI < 22.4 General Settings Perimeter SMTP Servers Description Stored XSSEPSS 0.2%CVE-2026-23607MEDIUMGFI MailEssentials AI < 22.4 Anti-Spam Whitelist Description Stored XSSEPSS 0.2%