[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fh1r_RygJdadz3wemFG3wOfk7eGdPGJgofO4kV_z6z-8":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":69,"kevVulnerabilities":128,"topProductsByCves":129,"seoMetadata":140,"meta":149},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":68},12115,"gfi",12,22,0,111,"2025-07-02","g",[16,21,27,31,36,41,46,50,54,58,62,65],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},50085,"kerio_control",7,5,{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},50083,"kerio_connect",67,4,"2025-03-31",{"id":28,"product_name":29,"version_count":9,"cve_count":25,"kev_count":11,"last_cve_update":30},50078,"archiver","2024-12-12",{"id":32,"product_name":33,"version_count":34,"cve_count":25,"kev_count":11,"last_cve_update":35},50087,"mailessentials",16,"2025-04-28",{"id":37,"product_name":38,"version_count":39,"cve_count":39,"kev_count":11,"last_cve_update":40},50088,"mailsecurity",3,"2005-10-20",{"id":42,"product_name":43,"version_count":44,"cve_count":44,"kev_count":11,"last_cve_update":45},50089,"vipre_antivirus",1,"2012-08-25",{"id":47,"product_name":48,"version_count":44,"cve_count":44,"kev_count":11,"last_cve_update":49},50079,"gfi_backup_2009","2012-09-07",{"id":51,"product_name":52,"version_count":11,"cve_count":44,"kev_count":11,"last_cve_update":53},50084,"kerio_connect_client","2017-05-02",{"id":55,"product_name":56,"version_count":44,"cve_count":44,"kev_count":11,"last_cve_update":57},50086,"languard_network_security_scanner","2005-05-02",{"id":59,"product_name":60,"version_count":44,"cve_count":11,"kev_count":11,"last_cve_update":61},50082,"gfi_reportcenter_framework",null,{"id":63,"product_name":64,"version_count":44,"cve_count":11,"kev_count":11,"last_cve_update":61},50081,"gfi_languard_reportpack",{"id":66,"product_name":67,"version_count":44,"cve_count":11,"kev_count":11,"last_cve_update":61},50080,"gfi_languard","Gfi is a technology vendor with 12 tracked products and 22 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[70,79,86,90,97,103,110,114,119,123],{"cveId":71,"description":72,"publishedDate":73,"cvssScore":74,"cvssVersion":75,"severity":76,"isKev":77,"epssScore":78},"CVE-2024-52875","An issue was discovered in GFI Kerio Control 9.2.5 through 9.4.5. The dest GET parameter passed to the \u002Fnonauth\u002FaddCertException.cs and \u002Fnonauth\u002FguestConfirm.cs and \u002Fnonauth\u002Fexpiration.cs pages is not properly sanitized before being used to generate a Location HTTP header in a 302 HTTP response. This can be exploited to perform Open Redirect or HTTP Response Splitting attacks, which in turn lead to Reflected Cross-Site Scripting (XSS). Remote command execution can be achieved by leveraging the upgrade feature in the admin interface.","2025-01-31",8.8,"v3.1","High",false,0.29344,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":83,"cvssVersion":84,"severity":76,"isKev":77,"epssScore":85},"CVE-2002-1121","SMTP content filter engines, including (1) GFI MailSecurity for Exchange\u002FSMTP before 7.2, (2) InterScan VirusWall before 3.52 build 1494, (3) the default configuration of MIMEDefang before 2.21, and possibly other products, do not detect fragmented emails as defined in RFC2046 (\"Message Fragmentation and Reassembly\") and supported in such products as Outlook Express, which allows remote attackers to bypass content filtering, including virus checking, via fragmented emails of the message\u002Fpartial content type.","2002-09-24",7.5,"v2",0.06667,{"cveId":87,"description":88,"publishedDate":40,"cvssScore":83,"cvssVersion":84,"severity":76,"isKev":77,"epssScore":89},"CVE-2005-3182","Buffer overflow in the HTTP management interface for GFI MailSecurity 8.1 allows remote attackers to execute arbitrary code via long headers such as (1) Host and (2) Accept in HTTP requests.  NOTE: the vendor suggests that this issues is \"in an underlying Microsoft technology\" which, if true, could mean that the overflow affects other products as well.",0.03995,{"cveId":91,"description":92,"publishedDate":93,"cvssScore":94,"cvssVersion":75,"severity":95,"isKev":77,"epssScore":96},"CVE-2021-29281","File upload vulnerability in GFI Mail Archiver versions up to and including 15.1 via insecure implementation of Telerik Web UI plugin which is affected by CVE-2014-2217, and CVE-2017-11317.","2022-07-07",9.8,"Critical",0.02566,{"cveId":98,"description":99,"publishedDate":100,"cvssScore":101,"cvssVersion":84,"severity":95,"isKev":77,"epssScore":102},"CVE-2004-1312","A bug in the HTML parser in a certain Microsoft HTML library, as used in various third party products, may allow remote attackers to cause a denial of service via certain strings, as reported in GFI MailEssentials for Exchange 9 and 10, and GFI MailSecurity for Exchange 8, which causes emails to remain in IIS or Exchange mail queues.","2005-01-03",10,0.0247,{"cveId":104,"description":105,"publishedDate":106,"cvssScore":107,"cvssVersion":75,"severity":108,"isKev":77,"epssScore":109},"CVE-2019-16414","A DOM based XSS in GFI Kerio Control v9.3.0 allows embedding of malicious code and manipulating the login page to send back a victim's cleartext credentials to an attacker via a login\u002F?reason=failure&NTLM= URI.","2019-09-30",6.1,"Medium",0.01566,{"cveId":111,"description":112,"publishedDate":30,"cvssScore":94,"cvssVersion":75,"severity":95,"isKev":77,"epssScore":113},"CVE-2024-11948","GFI Archiver Telerik Web UI Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GFI Archiver. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the product installer. The issue results from the use of a vulnerable version of Telerik Web UI. An attacker can leverage this vulnerability to execute code in the context of NETWORK SERVICE. Was ZDI-CAN-24041.",0.01435,{"cveId":115,"description":116,"publishedDate":117,"cvssScore":74,"cvssVersion":75,"severity":76,"isKev":77,"epssScore":118},"CVE-2023-25267","An issue was discovered in GFI Kerio Connect 9.4.1 patch 1 (fixed in 10.0.0). There is a stack-based Buffer Overflow in the webmail component's 2FASetup function via an authenticated request with a long primaryEMailAddress field to the webmail\u002Fapi\u002Fjsonrpc URI.","2023-03-15",0.01047,{"cveId":120,"description":121,"publishedDate":35,"cvssScore":74,"cvssVersion":75,"severity":76,"isKev":77,"epssScore":122},"CVE-2025-34491","GFI MailEssentials prior to version 21.8 is vulnerable to a .NET deserialization issue. A remote and authenticated attacker can execute arbitrary code by sending crafted serialized .NET when joining to a Multi-Server setup.",0.00947,{"cveId":124,"description":125,"publishedDate":53,"cvssScore":126,"cvssVersion":75,"severity":108,"isKev":77,"epssScore":127},"CVE-2017-7440","Kerio Connect 8.0.0 through 9.2.2, and Kerio Connect Client desktop application for Windows and Mac 9.2.0 through 9.2.2, when e-mail preview is enabled, allows remote attackers to conduct clickjacking attacks via a crafted e-mail message.",6.5,0.00928,[],[130,131,132,133,134,135,136,137,138,139],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},{"id":28,"product_name":29,"version_count":9,"cve_count":25,"kev_count":11,"last_cve_update":30},{"id":32,"product_name":33,"version_count":34,"cve_count":25,"kev_count":11,"last_cve_update":35},{"id":37,"product_name":38,"version_count":39,"cve_count":39,"kev_count":11,"last_cve_update":40},{"id":42,"product_name":43,"version_count":44,"cve_count":44,"kev_count":11,"last_cve_update":45},{"id":47,"product_name":48,"version_count":44,"cve_count":44,"kev_count":11,"last_cve_update":49},{"id":51,"product_name":52,"version_count":11,"cve_count":44,"kev_count":11,"last_cve_update":53},{"id":55,"product_name":56,"version_count":44,"cve_count":44,"kev_count":11,"last_cve_update":57},{"id":59,"product_name":60,"version_count":44,"cve_count":11,"kev_count":11,"last_cve_update":61},{"title":141,"metaDescription":142,"keywords":143,"structuredData":144},"Gfi - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Gfi covering 12 products with 22 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Gfi vulnerabilities, Gfi security, Gfi CVE, Gfi threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":145,"@type":146,"name":147,"description":142,"url":148},"https:\u002F\u002Fschema.org","Organization","Gfi","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fgfi",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":150,"apiVersion":151},"2026-10-16T23:48:30.481Z","3.0"]