CPE Details
GFI MailEssentials 21.6
21.6
2025-05-05
10h44 +00:00
10h44 +00:00
2025-05-05
10h44 +00:00
10h44 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:gfi:mailessentials:21.6:-:*:*:*:*:*:*
Informations
Vendor
gfiProduct
mailessentialsVersion
21.6Update
-Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| GFI MailEssentials prior to version 21.8 is vulnerable to a .NET deserialization issue. A remote and authenticated attacker can execute arbitrary code by sending crafted serialized .NET when joining to a Multi-Server setup. | 8.8 |
Haute |
||
| GFI MailEssentials prior to version 21.8 is vulnerable to an XML External Entity (XXE) issue. An authenticated and remote attacker can send crafted HTTP requests to read arbitrary system files. | 6.5 |
Moyen |
||
| GFI MailEssentials prior to version 21.8 is vulnerable to a local privilege escalation issue. A local attacker can escalate to NT Authority/SYSTEM by sending a crafted serialized payload to a .NET Remoting Service. | 7.8 |
Haute |
