CVE-2025-34490— GFI MailEssentials < 21.8 XXE Arbitrary File Read
Quick assessment
Affected
GFI MailEssentials
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
GFI MailEssentials是GFI公司的一款电子邮件安全套装，包含 14 个反垃圾邮件过滤器、3 个防病毒引擎以及恶意软件扫描功能。 GFI MailEssentials 21.8之前版本存在安全漏洞，该漏洞源于XML外部实体处理不当，可能导致读取任意系统文件。
Possible ATT&CK Techniques 2 AI
T1005 · Data from Local System T1210 · Exploitation of Remote Services
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-34490
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
GFI MailEssentials < 21.8 XXE Arbitrary File Read
Source: CVE Program / CVE List V5
Vulnerability Description
GFI MailEssentials prior to version 21.8 is vulnerable to an XML External Entity (XXE) issue. An authenticated and remote attacker can send crafted HTTP requests to read arbitrary system files.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
XML外部实体引用的不恰当限制(XXE)
Source: CVE Program / CVE List V5
Vulnerability Title
GFI MailEssentials 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
GFI MailEssentials是GFI公司的一款电子邮件安全套装，包含 14 个反垃圾邮件过滤器、3 个防病毒引擎以及恶意软件扫描功能。 GFI MailEssentials 21.8之前版本存在安全漏洞，该漏洞源于XML外部实体处理不当，可能导致读取任意系统文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| GFI | MailEssentials | 0 ~ 21.8 | - |
|
II. Public POCs for CVE-2025-34490
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-34490
请登录查看更多情报信息。
Security Blog Posts for CVE-2025-34490 (1)
Vendor Pages for CVE-2025-34490 (1)
-
Product Releases vendor-advisory
Same Patch Batch · GFI · 2025-04-28 · 3 CVEs total
| CVE-2025-34491 | 8.8 HIGH | GFI MailEssentials < 21.8 MultiNode Insecure Deserialization |
| CVE-2025-34489 | 7.8 HIGH | GFI MailEssentials < 21.8 Local Privilege Escalation |
IV. Related Vulnerabilities
Same vendor: GFI
-
CVE-2026-2039
GFI Archiver MArc.Store Missing Authorization Authentication -
CVE-2026-2036
GFI Archiver MArc.Store Deserialization of Untrusted Data Re -
CVE-2026-2038
GFI Archiver MArc.Core Missing Authorization Authentication -
CVE-2026-2037
GFI Archiver MArc.Core Deserialization of Untrusted Data Rem -
CVE-2025-35940
Hard-coded ArchiverSpaApi JWT Signing Key
Same weakness: CWE-611
-
CVE-2026-18061
Improper Restriction of XML External Entity References in AW -
CVE-2026-89260
MoguBlog through 6.2 XML External Entity Injection in the Un -
CVE-2026-82578
NextGen Healthcare Mirth Connect Improper Restriction of XML -
CVE-2026-78224
NextGen Healthcare Mirth Connect Improper Restriction of XML -
CVE-2026-89212
XML External Entity in Akana API Platform
V. Comments for CVE-2025-34490
No comments yet