Log in Start free

M-Files

Products

ProductCVEsExploitedLatest
M-Files Server14–Nov 28, 2023
M-Files Web5–Oct 20, 2023
Hubshare4–Oct 31, 2022
Web Companion2–Oct 20, 2023
M-Files Client2–May 25, 2023
M-Files New Web2–Mar 6, 2023
M-Files Desktop1–Apr 20, 2023
M-Files1–Mar 29, 2023

Exploited and recent CVEs

  • CVE-2023-6239 Medium 5.4 Incorrect calculation of effective permissions 0.6%
  • CVE-2023-6189 Medium 4.3 Improper Permission Handling in M-Files Server 0.5%
  • CVE-2023-6117 Medium 5.7 M-Files REST API allows Denial of Service 0.7%
  • CVE-2023-5524 High 8.2 M-Files Web Companion allows Remote Code Execution for some filetypes 0.3%
  • CVE-2023-5523 High 8.6 M-Files Web Companion allows Remote Code Execution 0.3%
  • CVE-2023-2325 High 7.3 Stored XSS Vulnerability in M-Files Classic Web 0.5%
  • CVE-2023-3406 High 7.7 Path traversal issue in M-Files Classic Web 0.7%
  • CVE-2023-3425 Medium 6.5 CVE-2023-3425: Out-of-Bounds memory read 0.7%
  • CVE-2023-3405 High 7.5 Denial of service condition in M-Files Server 0.8%
  • CVE-2023-2480 High 7.5 Elevation of Privilege in M-Files Desktop Client 0.2%
  • CVE-2023-2112 Low 3.6 Desktop component allows lateral movement between sessions 0.2%
  • CVE-2023-0384 Medium 6.5 Uncontrolled Resource Consuption in M-Files Server 0.8%
  • CVE-2023-0383 High 7.5 Uncontrolled Resource Consuption in M-Files Server 0.8%
  • CVE-2023-0382 Medium 6.5 Uncontrolled Resource Consumption in M-Files Server 0.8%
  • CVE-2023-0213 High 8.8 Local Elevation of Privilege in M-Files 0.2%
  • CVE-2022-4862 Medium 5.0 XSS vulnerability in M-Files Web 0.4%
  • CVE-2022-3284 Medium 6.5 Insecure way of passing a download key 0.7%
  • CVE-2022-4861 Medium 4.8 Incorrect Implementation of Authentication Algorithm 0.6%
  • CVE-2022-4858 Medium 4.4 Insertion of Sensitive Information into Log File 0.5%
  • CVE-2022-4264 Medium 6.5 Incorrect privilege assignment in M-Files Web Server 0.5%
  • CVE-2022-4270 Low 2.0 Incorrect privilege assignment in M-Files Web Server 0.5%
  • CVE-2022-1911 Medium 5.3 Information disclosure in M-Files Server 0.6%
  • CVE-2022-1606 Low 2.4 Incorrect privilege assignment in M-Files Server 0.5%
  • CVE-2022-39018 High 8.2 Broken access controls on PDFtron data in M-Files Hubshare 0.5%
  • CVE-2022-39019 Medium 6.3 Broken access controls on PDFtron WebviewerUI in M-Files Hubshare 0.4%
  • CVE-2022-39017 High 8.2 XSS in all comments fields in M-Files Hubshare 0.4%
  • CVE-2022-39016 High 8.2 Javascript injection in PDFtron in M-Files Hubshare 0.7%
  • CVE-2021-41808 Low 2.0 In M-Files Server product with versions before 21.11.10775.0, enabling logging of federated authentication would write sensitive information to event logs. 0.2%
  • CVE-2021-41807 High 7.5 Lack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0, allows brute-forcing of certain type of user accounts. 1.1%
  • CVE-2021-41807 High 7.5 Lack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0, allows brute-forcing of certain type of user accounts. 1.1%