Vulnerability Database

290,206

Total vulnerabilities in the database

CVE-2025-34490

GFI MailEssentials prior to version 21.8 is vulnerable to an XML External Entity (XXE) issue. An authenticated and remote attacker can send crafted HTTP requests to read arbitrary system files.

  • Published: Apr 28, 2025
  • Updated: May 11, 2025
  • CVE: CVE-2025-34490
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
gfi / mailessentials - 21.8