CVE-2025-34490

概要

参考情報

• frycos.github.io/vulns4free/2025/04/28/mailessentials.html · Exploit
• gfi.ai/products-and-solutions/network-security-solutions/mailessentials/resources/documentation/product-releases · Release Notes
• vulncheck.com/advisories/gfi-mailessentials-xxe-arbitrary-file-read

mailessentials のその他の脆弱性

• CVE-2026-23621中 4.3GFI MailEssentials AI versions prior to 22.4 contain an arbitrary directory existence enumeration vulnerability in the ListServer.IsPathExis…
• CVE-2026-23620中 4.3GFI MailEssentials AI versions prior to 22.4 contain an arbitrary file existence enumeration vulnerability in the ListServer.IsDBExist() web…
• CVE-2026-23619中 5.4GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Local Domains settings page. An auth…
• CVE-2026-23618中 5.4GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Spam Keyword Checking (Subject) cond…
• CVE-2026-23617中 5.4GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Spam Keyword Checking (Body) conditi…