Advisories · Technology
M-Files Server.
Every CVE that names M-Files Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.4 Medium
Incorrect calculation of effective permissions
- M-Files Server
- CWE-281
- CVSS 4.3 Medium
Improper Permission Handling in M-Files Server
- M-Files Server
- CWE-280
- CVSS 5.7 Medium
M-Files REST API allows Denial of Service
- M-Files Server
- Denial of service
- CVSS 6.5 Medium
CVE-2023-3425: Out-of-Bounds memory read
- M-Files Server
- Memory corruption
- CVSS 7.5 High
Denial of service condition in M-Files Server
- M-Files Server
- CWE-248
- CVSS 6.5 Medium
Uncontrolled Resource Consuption in M-Files Server
- M-Files Server
- Denial of service
- CVSS 7.5 High
Uncontrolled Resource Consuption in M-Files Server
- M-Files Server
- Denial of service
- CVSS 6.5 Medium
Uncontrolled Resource Consumption in M-Files Server
- M-Files Server
- Denial of service
- CVSS 4.4 Medium
Insertion of Sensitive Information into Log File
- M-Files Server
- Information disclosure
- CVSS 5.3 Medium
Information disclosure in M-Files Server
- M-Files Server
- Information disclosure
- CVSS 2.4 Low
Incorrect privilege assignment in M-Files Server
- M-Files Server
- Privilege escalation
- CVSS 2.0 Low
In M-Files Server product with versions before 21.11.10775.0, enabling logging of federated authentication would write sensitive information to event logs.
- M-Files Server
- Information disclosure
- CVSS 7.5 High
Lack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0, allows brute-forcing of certain type of user accounts.
- M-Files Server
- M-Files Web
- Authentication bypass
- CVSS 3.5 Low
SSRF vulnerability in M-Files Server products with versions before 22.1.11017.1, allows requests from server.
- M-Files Server
- Server-side request forgery (SSRF)