M-Files M-Files Web vulnerabilities

CVEs per yearBy the year they were published

1. 20223
2. 20232

Newest CVEs

• CVE-2023-2325

  Stored XSS Vulnerability in M-Files Classic Web

  M-Files · M-Files Web

  High7.3
• CVE-2023-3406

  Path traversal issue in M-Files Classic Web

  M-Files · M-Files Web

  High7.7
• CVE-2022-4264

  Incorrect privilege assignment in M-Files Web Server

  M-Files · M-Files Web

  Medium6.5
• CVE-2022-4270

  Incorrect privilege assignment in M-Files Web Server

  M-Files · M-Files Web

  Low2.0
• CVE-2021-41807

  Lack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0, allows brute-forcing of certain type of user accounts.

  M-Files · M-Files Server

  High7.5