CPE Details
GFI MailEssentials 21.6
21.6
2025-05-05
10h44 +00:00
10h44 +00:00
2025-05-05
10h44 +00:00
10h44 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:gfi:mailessentials:21.6:-:*:*:*:*:*:*
Informations
Vendor
gfiProduct
mailessentialsVersion
21.6Update
-Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| GFI MailEssentials prior to version 21.8 is vulnerable to a .NET deserialization issue. A remote and authenticated attacker can execute arbitrary code by sending crafted serialized .NET when joining to a Multi-Server setup. | 8.8 |
High |
||
| GFI MailEssentials prior to version 21.8 is vulnerable to an XML External Entity (XXE) issue. An authenticated and remote attacker can send crafted HTTP requests to read arbitrary system files. | 6.5 |
Medium |
||
| GFI MailEssentials prior to version 21.8 is vulnerable to a local privilege escalation issue. A local attacker can escalate to NT Authority/SYSTEM by sending a crafted serialized payload to a .NET Remoting Service. | 7.8 |
High |
