M-Files M-Files Server

• CVE-2023-6239 Medium 5.4 Incorrect calculation of effective permissions 0.6%
• CVE-2023-6189 Medium 4.3 Improper Permission Handling in M-Files Server 0.5%
• CVE-2023-6117 Medium 5.7 M-Files REST API allows Denial of Service 0.7%
• CVE-2023-3425 Medium 6.5 CVE-2023-3425: Out-of-Bounds memory read 0.7%
• CVE-2023-3405 High 7.5 Denial of service condition in M-Files Server 0.8%
• CVE-2023-0384 Medium 6.5 Uncontrolled Resource Consuption in M-Files Server 0.8%
• CVE-2023-0383 High 7.5 Uncontrolled Resource Consuption in M-Files Server 0.8%
• CVE-2023-0382 Medium 6.5 Uncontrolled Resource Consumption in M-Files Server 0.8%
• CVE-2022-4858 Medium 4.4 Insertion of Sensitive Information into Log File 0.5%
• CVE-2022-1911 Medium 5.3 Information disclosure in M-Files Server 0.6%
• CVE-2022-1606 Low 2.4 Incorrect privilege assignment in M-Files Server 0.5%
• CVE-2021-41808 Low 2.0 In M-Files Server product with versions before 21.11.10775.0, enabling logging of federated authentication would write sensitive information to event logs. 0.2%
• CVE-2021-41807 High 7.5 Lack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0, allows brute-forcing of certain type of user accounts. 1.1%
• CVE-2021-41809 Low 3.5 SSRF vulnerability in M-Files Server products with versions before 22.1.11017.1, allows requests from server. 0.6%