Skip to contentM-files Server vulnerabilities
- m-files serverIncorrect calculation of effective permissionsCVE-2023-62395.4 Medium
- m-files serverImproper Permission Handling in M-Files ServerCVE-2023-61894.3 Medium
- m-files serverM-Files REST API allows Denial of ServiceCVE-2023-61175.7 Medium
- m-files server, classic web +1 moreCVE-2023-3425: Out-of-Bounds memory readCVE-2023-34256.5 Medium
- m-files serverDenial of service condition in M-Files ServerCVE-2023-34057.5 High
- m-files serverUncontrolled Resource Consuption in M-Files ServerCVE-2023-03846.5 Medium
- m-files serverUncontrolled Resource Consuption in M-Files ServerCVE-2023-03837.5 High
- m-files serverUncontrolled Resource Consumption in M-Files ServerCVE-2023-03826.5 Medium
- m-files serverInsertion of Sensitive Information into Log FileCVE-2022-48584.4 Medium
- m-files serverInformation disclosure in M-Files ServerCVE-2022-19115.3 Medium
- m-files serverIncorrect privilege assignment in M-Files ServerCVE-2022-16062.4 Low
- m-files serverIn M-Files Server product with versions before 21.11.10775.0, enabling logging of federated authentication would write sensitive information to event logs.CVE-2021-418082.0 Low
- m-files server, web +1 moreLack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0, allows brute-forcing of certain type of user accounts.CVE-2021-418077.5 High
- m-files serverSSRF vulnerability in M-Files Server products with versions before 22.1.11017.1, allows requests from server.CVE-2021-418093.5 Low