gfi_archiver vulnerabilities
CVEs whose affected-version data names the gfi_archiver package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-112333Medium· 5.4GFI Archiver < 15.14 Stored XSS via MailInsights.aspx
GFI Archiver before 15.14 contains a stored cross-site scripting vulnerability in the MailInsights scheduled report configuration that allows authenticated attackers to inject arbitrary web script or HTML via the report name parameter to…
CVE-2026-48530Medium· 5.4GFI Archiver < 15.14 Stored XSS via CategorizationPolicyWizard.aspx
GFI Archiver before 15.14 contains a stored cross-site scripting vulnerability in the Classification Rules configuration that allows authenticated attackers to inject arbitrary web script or HTML via the rule name and email criteria para…
CVE-2026-48539Medium· 5.4GFI Archiver < 15.14 Stored XSS via MailInsights.aspx
GFI Archiver before 15.14 contains a stored cross-site scripting vulnerability in the MailInsights scheduled report configuration that allows authenticated attackers to inject arbitrary web script or HTML via the report name parameter to…