Skip to content
OpenAdvisories

Product · GFI Software

GFI Archiver

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-112333

    GFI Archiver < 15.14 Stored XSS via MailInsights.aspx

    GFI Archiver before 15.14 contains a stored cross-site scripting vulnerability in the MailInsights scheduled report configuration that allows authenticated attackers to inject arbitrary web script or HTML via the report name parameter to /Archiver/MailInsight…

    GFI Software GFI Archiver
  • Medium 5.4
    CVE-2026-48539

    GFI Archiver < 15.14 Stored XSS via MailInsights.aspx

    GFI Archiver before 15.14 contains a stored cross-site scripting vulnerability in the MailInsights scheduled report configuration that allows authenticated attackers to inject arbitrary web script or HTML via the report name parameter to /Archiver/MailInsight…

    GFI Software GFI Archiver
  • Medium 5.4
    CVE-2026-48538

    GFI Archiver < 15.13 Stored XSS via ImportSettingsWizard.ashx

    GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the default import settings configuration that allows authenticated attackers to inject arbitrary web script or HTML via the configured folders parameter to /Archiver/ImportSett…

    GFI Software GFI Archiver
  • Medium 5.4
    CVE-2026-48537

    GFI Archiver < 15.13 Stored XSS via FileArchiveAssistantWizard.aspx

    GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the File Archive Assistant configuration that allows authenticated attackers to inject arbitrary web script or HTML via the excluded extensions parameter to /Archiver/FileArchiv…

    GFI Software GFI Archiver
  • Medium 5.4
    CVE-2026-48536

    GFI Archiver < 15.13 Stored XSS via GeneralSettingsWizard.aspx

    GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the General Settings SMTP configuration that allows authenticated attackers to inject arbitrary web script or HTML via the SMTP server address parameter to /Archiver/GeneralSett…

    GFI Software GFI Archiver
  • Medium 5.4
    CVE-2026-48535

    GFI Archiver < 15.13 Stored XSS via CallHomeSettingsWizard.aspx

    GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the Call Home proxy server configuration that allows authenticated attackers to inject arbitrary web script or HTML via the proxy server address parameter to /Archiver/CallHomeS…

    GFI Software GFI Archiver
  • Medium 5.4
    CVE-2026-48534

    GFI Archiver < 15.13 Stored XSS via ImapServerWizard.aspx

    GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the IMAP Server configuration that allows authenticated attackers to inject arbitrary web script or HTML via the server URL parameter to /Archiver/ImapServerWizard.aspx. The inj…

    GFI Software GFI Archiver
  • Medium 5.4
    CVE-2026-48532

    GFI Archiver < 15.13 Stored XSS via FAARetentionPolicyWizard.aspx

    GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the File History Retention Policy configuration that allows authenticated attackers to inject arbitrary web script or HTML via the policy name parameter to /Archiver/FAARetentio…

    GFI Software GFI Archiver
  • Medium 5.4
    CVE-2026-48531

    GFI Archiver < 15.13 Stored XSS via RetentionPolicyWizard.aspx

    GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the Retention Policy configuration that allows authenticated attackers to inject arbitrary web script or HTML via the policy name parameter to /Archiver/RetentionPolicyWizard.as…

    GFI Software GFI Archiver
  • Medium 5.4
    CVE-2026-48530

    GFI Archiver < 15.14 Stored XSS via CategorizationPolicyWizard.aspx

    GFI Archiver before 15.14 contains a stored cross-site scripting vulnerability in the Classification Rules configuration that allows authenticated attackers to inject arbitrary web script or HTML via the rule name and email criteria parameters to /Archiver/Ca…

    GFI Software GFI Archiver