Skip to content
OpenAdvisories

Vendor

M-Files

64 known vulnerabilities.

Products

M-Files Server 35 M-Files Web 9 Hubshare 8 Web Companion 2 M-Files New Web 2 M-Files Client 2 M-Files Aino 1 M-Files Mobile 1 M-Files Desktop 1 M-Files 1 M-Files Connector for Copilot 1 M-Files Admin 1 M-Files Hubshare 1 Server 0
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 3.6
    CVE-2023-2112

    Desktop component allows lateral movement between sessions

    Desktop component service allows lateral movement between sessions in M-Files before 23.4.12455.0.

    M-Files M-Files Desktop
  • Low 2.0
    CVE-2022-4270

    Incorrect privilege assignment in M-Files Web Server

    Incorrect privilege assignment issue in M-Files Web in M-Files Web versions before 22.5.11436.1 could have changed permissions accidentally.

    M-Files M-Files Web
  • Low 2.4
    CVE-2022-1606

    Incorrect privilege assignment in M-Files Server

    Incorrect privilege assignment in M-Files Server versions before 22.3.11164.0 and before 22.3.11237.1 allows user to read unmanaged objects.

    M-Files M-Files Server
  • Low 2.0
    CVE-2021-41808

    In M-Files Server product with versions before 21.11.10775.0, enabling logging of federated authentication would write sensitive information to event logs.

    In M-Files Server product with versions before 21.11.10775.0, enabling logging of Federated authentication to event log wrote sensitive information to log. Mitigating factors are logging is disabled by default.

    M-Files M-Files Server
  • Low 3.5
    CVE-2021-41809

    SSRF vulnerability in M-Files Server products with versions before 22.1.11017.1, allows requests from server.

    SSRF vulnerability in M-Files Server products with versions before 22.1.11017.1, in a preview function allowed making queries from the server with certain document types referencing external entities.

    M-Files M-Files Server