M-Files M-Files Web

• CVE-2023-2325 High 7.3 Stored XSS Vulnerability in M-Files Classic Web 0.5%
• CVE-2023-3406 High 7.7 Path traversal issue in M-Files Classic Web 0.7%
• CVE-2022-4264 Medium 6.5 Incorrect privilege assignment in M-Files Web Server 0.5%
• CVE-2022-4270 Low 2.0 Incorrect privilege assignment in M-Files Web Server 0.5%
• CVE-2021-41807 High 7.5 Lack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0, allows brute-forcing of certain type of user accounts. 1.1%