M-Files vulnerabilities

CVEs per yearBy the year they were published

1. 202213
2. 202317

Newest CVEs

• CVE-2023-6239

  Incorrect calculation of effective permissions

  M-Files · M-Files Server

  Medium5.4
• CVE-2023-6189

  Improper Permission Handling in M-Files Server

  M-Files · M-Files Server

  Medium4.3
• CVE-2023-6117

  M-Files REST API allows Denial of Service

  M-Files · M-Files Server

  Medium5.7
• CVE-2023-5524

  M-Files Web Companion allows Remote Code Execution for some filetypes

  M-Files · Web Companion

  High8.2
• CVE-2023-5523

  M-Files Web Companion allows Remote Code Execution

  M-Files · Web Companion

  High8.6
• CVE-2023-2325

  Stored XSS Vulnerability in M-Files Classic Web

  M-Files · M-Files Web

  High7.3
• CVE-2023-3406

  Path traversal issue in M-Files Classic Web

  M-Files · M-Files Web

  High7.7
• CVE-2023-3425

  CVE-2023-3425: Out-of-Bounds memory read

  M-Files · M-Files Server

  Medium6.5
• CVE-2023-3405

  Denial of service condition in M-Files Server

  M-Files · M-Files Server

  High7.5
• CVE-2023-2480

  Elevation of Privilege in M-Files Desktop Client

  M-Files · M-Files Client

  High7.5